# 173.239.240.127 — IP Intelligence Summary 173.239.240.127 is an IPv4 address operated by Private Customer (AS396356), geolocated to Edison, United States. As of October 6, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/173.239.240.127 - Last updated: 2026-10-06 ## Ownership - Organization: Private Customer - Network name: NSQ-VENTURE - Allocated block: 173.239.240.0/24 - ASN: AS396356 (https://ipdebrief.com/asn/396356) - Regional registry: ARIN ## Location - City: Edison - Region: New Jersey - Country: United States - Time zone: — ## Network classification - Infrastructure type: — - Datacenter / hosting: no - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: Low Risk (25/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Analyst narrative \# IP Intelligence Briefing: 173.239.240.127/32 \## Executive Summary IP address 173.239.240.127 presents a **low risk** profile with a risk score of 25. The address is classified as "Firewalled / No Services" with no open ports detected. Current threat indicators show no active malicious activity, though geolocation validation anomalies and route stability issues warrant monitoring. \## Ownership and Registration \- **ASN:** 396356 \- **Organization:** Private Customer \- **Netname:** NSQ-VENTURE \- **CIDR Block:** 173.239.240.0/24 \- **RIR:** ARIN \- **Abuse Contact:** None listed \## Geolocation Profile \- **Country:** United States (US) \- **Region/State:** New Jersey \- **City:** Edison \- **Geolocation Validation:** Failed — RTT measurements (19-22ms) inconsistent with claimed distance (6002.9km), indicating potential geolocation spoofing or measurement error \- **Minimum Possible RTT:** 120.1ms for claimed distance \## Network Classification \- **Infrastructure Type:** None detected \- **Classification Flags:** Not a CDN, VPN, proxy, Tor exit, hosting, mobile, or residential IP \- **Anycast:** No \- **Bogon:** No \- **Service Status:** Firewalled / No Services \## Threat Intelligence \- **Risk Score:** 25 (Low Risk) \- **Blacklist Count:** 0 \- **Known Campaigns:** None \- **Abuse Confidence Score:** Not applicable \- **Tor Exit Node:** No \- **Known Attacker:** No \- **Spam Source:** No \- **Threat Persistence:** 0 days \- **Persistently Malicious:** No \## Active Services \- **Open Ports:** None detected \- **TLS Certificate:** None \- **HTTP Banner:** None \- **DNS Resolution:** No forward resolution; 0 PTR hostnames \- **Email Authentication:** No SPF or DMARC records \## Control Plane Analysis \- **Route Stability:** Unstable (isRouteStable: false) \- **BGP Prefix:** 173.239.240.0/24 \- **RPKI State:** Not validated \- **DNSSEC Valid:** Yes \- **Operator Score:** 0.1304 (Minimal) \- **DNSBL Listings:** 1 of 8 total lists \- **Traceroute:** 14 hops; transit networks include Comcast and Cogent; 2 timed-out hops \## Historical Observations \- **Total Observations:** 16 \- **Recent Activity:** All recent observations (as of 2026-07-28) show 0 threat observations and no ownership changes \- **Threat Persistence:** None detected \- **Consistent Pattern:** No escalation in risk signals over observation period \## Network Relationships \- **Total Relationships:** 2 \- **Relationship Type:** Same Network (NSQ-VENTURE) \- **Correlated IPs:** 0 \- **Certificate Matches:** 0 \## Neighborhood Analysis (173.239.240.0/24) \- **Total Siblings:** 100 IPs in /24 subnet \- **Abuse Density:** 0 \- **Risk Distribution:** \- High Risk: 0 \- Medium Risk: 4 \- Low Risk: 96 \- **Neighborhood Classification:** Low threat concentration \- **Inherited Risk:** 0 \## Recommended Actions Based on the IP's risk profile, the following actions are recommended: 1. **Monitor:** Continue monitoring due to geolocation validation failures and route instability 2. **Block:** No immediate blocking required given low risk score and lack of threat indicators 3. **Investigate:** Investigate the 4 medium-risk neighbors in the /24 subnet for potential correlated activity 4. **Log:** Log traffic for future baseline comparison \## Threat Assessment Narrative IP 173.239.240.127 is a low-risk address operating from the Edison, New Jersey region under the NSQ-VENTURE network. The IP shows no active malicious indicators, no open services, and no blacklist associations. However, the geolocation validation failure (RTT inconsistent with claimed distance) and unstable routing suggest the IP may be misconfigured, misreported, or using spoofing techniques. The broader /24 subnet shows minimal abuse density with only 4 medium-risk neighbors. Current security posture indicates no immediate threat requiring intervention, but continued monitoring is advisable to detect any changes in behavior or risk profile. **Assessment Date:** 2026-07-28 **Confidence Level:** High (based on comprehensive multi-source validation) ## Nearby addresses - 173.239.240.5 (https://ipdebrief.com/173.239.240.5) - 173.239.240.6 (https://ipdebrief.com/173.239.240.6) - 173.239.240.9 (https://ipdebrief.com/173.239.240.9) - 173.239.240.15 (https://ipdebrief.com/173.239.240.15) - 173.239.240.18 (https://ipdebrief.com/173.239.240.18) - 173.239.240.24 (https://ipdebrief.com/173.239.240.24) - 173.239.240.27 (https://ipdebrief.com/173.239.240.27) - 173.239.240.34 (https://ipdebrief.com/173.239.240.34) - 173.239.240.35 (https://ipdebrief.com/173.239.240.35) - 173.239.240.36 (https://ipdebrief.com/173.239.240.36) - 173.239.240.37 (https://ipdebrief.com/173.239.240.37) - 173.239.240.38 (https://ipdebrief.com/173.239.240.38) --- Source: IPDebrief, "173.239.240.127 IP intelligence", https://ipdebrief.com/173.239.240.127, updated 2026-10-06. Assessments are probabilistic.