# 173.239.240.125 — IP Intelligence Summary

173.239.240.125 is an IPv4 address operated by Private Customer (AS396356), geolocated to Edison, United States. As of October 28, 2026, IPDebrief rates it Moderate Risk (50/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/173.239.240.125
- Last updated: 2026-10-28

## Ownership

- Organization: Private Customer
- Network name: NSQ-VENTURE
- Allocated block: 173.239.240.0/24
- ASN: AS396356 (https://ipdebrief.com/asn/396356)
- Regional registry: ARIN

## Location

- City: Edison
- Region: New Jersey
- Country: United States
- Time zone: —

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Moderate Risk (50/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\# IP INTELLIGENCE BRIEFING

\## Target: 173.239.240.125/32

\---

\### EXECUTIVE SUMMARY

**Risk Level:** LOW RISK (Score: 25/100)

**Classification:** Clean / No Active Threat Indicators

**Recommendation:** No immediate blocking required; monitor for behavioral changes

\---

\### OWNERSHIP & INFRASTRUCTURE

\- **Organization:** Private Customer (NSQ-VENTURE)

\- **ASN:** 396356

\- **CIDR Block:** 173.239.240.0/24

\- **Registration:** ARIN (Edison, New Jersey, US)

\- **Network Role:** Firewalled / No Services Detected

\- **DNS Configuration:** No PTR records, no reverse resolution, no hosted domains

\---

\### THREAT ASSESSMENT

**Current Status:** No active threat indicators detected

\- **Known Attacker:** No

\- **Tor Exit Node:** No

\- **Spam Source:** No

\- **Blacklist Presence:** 0 confirmed lists (1 DNSBL entry out of 8 scanned)

\- **Open Ports/Services:** None detected

\- **TLS Certificates:** None observed

\---

\### GEOGRAPHIC VALIDATION

**Status:** GEOGRAPHIC INCONSISTENCY DETECTED

\- **Claimed Location:** Edison, New Jersey, US

\- **Validated Location:** Implausible

\- **Issue:** RTT measurement (20ms) contradicts claimed geographic distance (6003km minimum RTT should be 120.1ms)

\- **Implication:** IP may be misreported or geolocation data is unreliable

\---

\### BEHAVIORAL ANALYSIS

**Threat History:**

\- **Observation Count:** 17 historical signals

\- **Threat Persistence:** 0 days (no persistent malicious activity)

\- **Classification Trend:** Consistently "clean" over observation period

\- **Abuse Density:** 0.0357 (low)

**Route Stability:** Route changes detected in last 30 days; BGP prefix 173.239.240.0/24 shows instability

\---

\### NETWORK NEIGHBORHOOD (173.239.240.0/24)

**Subnet Risk Profile:** LOW ABUSE DENSITY

\- **Total Neighbors Analyzed:** 100

\- **Risk Distribution:**

\- High Risk: 0

\- Medium Risk: 4

\- Low Risk: 96

\- **Abuse Density Score:** 0.0

**Notable Neighboring IPs:**

| IP Address | Risk Score | Authority Score |

|------------|------------|-----------------|

| 173.239.240.18 | 40 | 50 |

| 173.239.240.5  | 15 | 50 |

| 173.239.240.34 | 25 | 50 |

| 173.239.240.35 | 25 | 50 |

| 173.239.240.36 | 25 | 50 |

\---

\### NETWORK TOPOLOGY

\- **Hops to First Hop:** 14

\- **Transit Networks:** Comcast, Cogent

\- **Control Plane:** Origin ASN 396356; Route stable: false

\---

\### ACTIONABLE RECOMMENDATIONS

**Immediate Actions:**

1. **No Blocking Required:** Current risk profile does not warrant blocking

2. **Monitor Geographic Discrepancy:** Investigate source of geolocation mismatch if traffic volume increases

3. **Track Route Stability:** Monitor for BGP changes that may indicate infrastructure shifts

**SOC Analyst Notes:**

\- IP represents a private customer endpoint with no exposed services

\- Low-risk classification supported by absence of threat indicators

\- Geographic validation failure suggests data quality issue rather than malicious activity

\- Neighborhood analysis shows minimal abuse density across subnet

**Firewall Rules:** No rules required based on current risk assessment

\---

\### DATA QUALITY FLAGS

\- ⚠️ Geographic validation failed (RTT vs. claimed distance)

\- ⚠️ Route stability indicator shows recent changes

\- ⚠️ DNS reverse resolution not confirmed

\---

**Generated:** 2026-07-28

**Data Source:** IPDebrief Intelligence Platform

**Classification:** Defensive Security Intelligence

## Nearby addresses

- 173.239.240.5 (https://ipdebrief.com/173.239.240.5)
- 173.239.240.6 (https://ipdebrief.com/173.239.240.6)
- 173.239.240.9 (https://ipdebrief.com/173.239.240.9)
- 173.239.240.15 (https://ipdebrief.com/173.239.240.15)
- 173.239.240.18 (https://ipdebrief.com/173.239.240.18)
- 173.239.240.24 (https://ipdebrief.com/173.239.240.24)
- 173.239.240.27 (https://ipdebrief.com/173.239.240.27)
- 173.239.240.34 (https://ipdebrief.com/173.239.240.34)
- 173.239.240.35 (https://ipdebrief.com/173.239.240.35)
- 173.239.240.36 (https://ipdebrief.com/173.239.240.36)
- 173.239.240.37 (https://ipdebrief.com/173.239.240.37)
- 173.239.240.38 (https://ipdebrief.com/173.239.240.38)

---

Source: IPDebrief, "173.239.240.125 IP intelligence", https://ipdebrief.com/173.239.240.125, updated 2026-10-28. Assessments are probabilistic.