173.239.240.130📋 Copy

## IP Intelligence Briefing: 173.239.240.130/32

Classification: Low Risk | Risk Score: 20/100

Date: 2026-07-28 | Status: Active Monitoring

---

Executive Summary

IP address 173.239.240.130 is classified as Low Risk with a risk score of 20/100. The address belongs to a private customer network (NSQ-VENTURE) under ARIN registration. No active threat indicators, blacklist entries, or malicious behavior observed. The IP operates as firewalled infrastructure with no accessible services.

---

Network Attribution & Infrastructure

• ASN: 396356 (Private Customer)
• Netname: NSQ-VENTURE
• CIDR: 173.239.240.0/24
• RIR: ARIN
• Geolocation: Claimed New Jersey, US (Edison)
• Network Role: Firewalled / No Services Detected

---

Threat Assessment

Current Threat Indicators: None

• Abuse Confidence Score: Not applicable
• Blacklist Count: 0
• Known Attacker Status: False
• Tor Exit Node: False
• Spam Source: False
• Threat Feeds: Empty

Services & Ports: No open ports detected. No TLS certificates, HTTP services, or server banners observed.

---

Neighborhood Analysis

Subnet: 173.239.240.0/24

• Total Siblings: 100
• Abuse Density: 0 (No abuse signals)
• Risk Distribution: 0 High, 4 Medium, 96 Low
• Threat Siblings: 0

Notable neighbors in subnet include:

• 173.239.240.18 (Risk: 40, Authority: 50)
• 173.239.240.5 (Risk: 15, Authority: 50)
• 173.239.240.34-36 (Risk: 25, Authority: 50)

---

Historical Observations

Observation Count: 16 signals

• Ownership Changes: 0
• Threat Persistence Days: 0
• Persistently Malicious: False

Recent Signal Types:

• ASN/Network Registration (Confidence: 0.95)
• Geographic Validation (Confidence: 0.30)
• Network Role Classification (Confidence: 0.30)
• Threat Indicators (Confidence: 0.30)

---

Anomaly Detection

Geolocation Validation Issue:

• Claimed location: New Jersey, US (6002.9 km from probe origin)
• Observed RTT: 19.0ms (Minimum expected: 120.1ms)
• GeoPlausible: False
• Violation: RTT 19.0ms < minimum possible 120.1ms for 6003km

This discrepancy indicates the claimed geolocation is unreliable and may require cross-validation.

---

Control Plane & Routing

• Origin ASN: 396356
• BGP Prefix: 173.239.240.0/24
• Route Stability: False (Not stable)
• iBGP/MOAS: False
• DNSSEC: Valid
• DNSBL Listed: 0/8 lists

---

Recommended Actions

No immediate defensive actions required. The IP presents minimal risk with no active threat indicators.

For SOC Analysts:

1. No firewall blocking recommended — IP is low risk

2. Monitor geolocation discrepancy — Validate claimed NJ location against actual network routing

3. Subnet context — 96% of subnet peers are low risk; minimal lateral threat concern

4. Baseline behavior — No open services; treat as firewalled infrastructure

---

Intelligence Confidence: High (based on 16 observation signals, no contradictory threat data)

Last Updated: 2026-07-28T16:58:17 UTC

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.