173.239.240.125
173.239.240.125 is an IPv4 address operated by Private Customer (AS396356), geolocated to Edison, United States. As of October 28, 2026, IPDebrief rates it Moderate Risk (50/100); no anonymizing service was detected.
# IP INTELLIGENCE BRIEFING
## Target: 173.239.240.125/32
---
EXECUTIVE SUMMARY
Risk Level: LOW RISK (Score: 25/100)
Classification: Clean / No Active Threat Indicators
Recommendation: No immediate blocking required; monitor for behavioral changes
---
OWNERSHIP & INFRASTRUCTURE
- Organization: Private Customer (NSQ-VENTURE)
- ASN: 396356
- CIDR Block: 173.239.240.0/24
- Registration: ARIN (Edison, New Jersey, US)
- Network Role: Firewalled / No Services Detected
- DNS Configuration: No PTR records, no reverse resolution, no hosted domains
---
THREAT ASSESSMENT
Current Status: No active threat indicators detected
- Known Attacker: No
- Tor Exit Node: No
- Spam Source: No
- Blacklist Presence: 0 confirmed lists (1 DNSBL entry out of 8 scanned)
- Open Ports/Services: None detected
- TLS Certificates: None observed
---
GEOGRAPHIC VALIDATION
Status: GEOGRAPHIC INCONSISTENCY DETECTED
- Claimed Location: Edison, New Jersey, US
- Validated Location: Implausible
- Issue: RTT measurement (20ms) contradicts claimed geographic distance (6003km minimum RTT should be 120.1ms)
- Implication: IP may be misreported or geolocation data is unreliable
---
BEHAVIORAL ANALYSIS
Threat History:
- Observation Count: 17 historical signals
- Threat Persistence: 0 days (no persistent malicious activity)
- Classification Trend: Consistently "clean" over observation period
- Abuse Density: 0.0357 (low)
Route Stability: Route changes detected in last 30 days; BGP prefix 173.239.240.0/24 shows instability
---
NETWORK NEIGHBORHOOD (173.239.240.0/24)
Subnet Risk Profile: LOW ABUSE DENSITY
- Total Neighbors Analyzed: 100
- Risk Distribution:
- High Risk: 0
- Medium Risk: 4
- Low Risk: 96
- Abuse Density Score: 0.0
Notable Neighboring IPs:
| IP Address | Risk Score | Authority Score |
|---|---|---|
| 173.239.240.18 | 40 | 50 |
| 173.239.240.5 | 15 | 50 |
| 173.239.240.34 | 25 | 50 |
| 173.239.240.35 | 25 | 50 |
| 173.239.240.36 | 25 | 50 |
---
NETWORK TOPOLOGY
- Hops to First Hop: 14
- Transit Networks: Comcast, Cogent
- Control Plane: Origin ASN 396356; Route stable: false
---
ACTIONABLE RECOMMENDATIONS
Immediate Actions:
1. No Blocking Required: Current risk profile does not warrant blocking
2. Monitor Geographic Discrepancy: Investigate source of geolocation mismatch if traffic volume increases
3. Track Route Stability: Monitor for BGP changes that may indicate infrastructure shifts
SOC Analyst Notes:
- IP represents a private customer endpoint with no exposed services
- Low-risk classification supported by absence of threat indicators
- Geographic validation failure suggests data quality issue rather than malicious activity
- Neighborhood analysis shows minimal abuse density across subnet
Firewall Rules: No rules required based on current risk assessment
---
DATA QUALITY FLAGS
- ⚠️ Geographic validation failed (RTT vs. claimed distance)
- ⚠️ Route stability indicator shows recent changes
- ⚠️ DNS reverse resolution not confirmed
---
Generated: 2026-07-28
Data Source: IPDebrief Intelligence Platform
Classification: Defensive Security Intelligence
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Private Customer |
| ASN | AS396356 |
| Network Name | NSQ-VENTURE |
| CIDR Block | 173.239.240.0/24 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS396356 |
| Network Prefix | 173.239.240.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-18 17:42:25 UTC |
| Last Seen | 2026-10-29 14:20:41 UTC |
| Profile Built | 2026-10-28 07:53:32 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 20 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 173.239.240.125
Who owns the IP address 173.239.240.125?
173.239.240.125 is registered to Private Customer. The address falls within the 173.239.240.0/24 network block. Registration is held at ARIN.
Where is 173.239.240.125 located?
Geolocation data places 173.239.240.125 in Edison, New Jersey, United States. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 173.239.240.125 malicious or safe?
173.239.240.125 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.