# 173.239.240.130 — IP Intelligence Summary

173.239.240.130 is an IPv4 address operated by Private Customer (AS396356), geolocated to Ashburn, United States. As of October 28, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/173.239.240.130
- Last updated: 2026-10-28

## Ownership

- Organization: Private Customer
- Network name: NSQ-VENTURE
- Allocated block: 173.239.240.0/24
- ASN: AS396356 (https://ipdebrief.com/asn/396356)
- Regional registry: ARIN

## Location

- City: Ashburn
- Region: VA
- Country: United States
- Time zone: America/New_York

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\## IP Intelligence Briefing: 173.239.240.130/32

**Classification:** Low Risk | **Risk Score:** 20/100

**Date:** 2026-07-28 | **Status:** Active Monitoring

\---

\### Executive Summary

IP address 173.239.240.130 is classified as Low Risk with a risk score of 20/100. The address belongs to a private customer network (NSQ-VENTURE) under ARIN registration. No active threat indicators, blacklist entries, or malicious behavior observed. The IP operates as firewalled infrastructure with no accessible services.

\---

\### Network Attribution & Infrastructure

\- **ASN:** 396356 (Private Customer)

\- **Netname:** NSQ-VENTURE

\- **CIDR:** 173.239.240.0/24

\- **RIR:** ARIN

\- **Geolocation:** Claimed New Jersey, US (Edison)

\- **Network Role:** Firewalled / No Services Detected

\---

\### Threat Assessment

**Current Threat Indicators:** None

\- Abuse Confidence Score: Not applicable

\- Blacklist Count: 0

\- Known Attacker Status: False

\- Tor Exit Node: False

\- Spam Source: False

\- Threat Feeds: Empty

**Services & Ports:** No open ports detected. No TLS certificates, HTTP services, or server banners observed.

\---

\### Neighborhood Analysis

**Subnet:** 173.239.240.0/24

\- **Total Siblings:** 100

\- **Abuse Density:** 0 (No abuse signals)

\- **Risk Distribution:** 0 High, 4 Medium, 96 Low

\- **Threat Siblings:** 0

Notable neighbors in subnet include:

\- 173.239.240.18 (Risk: 40, Authority: 50)

\- 173.239.240.5 (Risk: 15, Authority: 50)

\- 173.239.240.34-36 (Risk: 25, Authority: 50)

\---

\### Historical Observations

**Observation Count:** 16 signals

\- **Ownership Changes:** 0

\- **Threat Persistence Days:** 0

\- **Persistently Malicious:** False

**Recent Signal Types:**

\- ASN/Network Registration (Confidence: 0.95)

\- Geographic Validation (Confidence: 0.30)

\- Network Role Classification (Confidence: 0.30)

\- Threat Indicators (Confidence: 0.30)

\---

\### Anomaly Detection

**Geolocation Validation Issue:**

\- Claimed location: New Jersey, US (6002.9 km from probe origin)

\- Observed RTT: 19.0ms (Minimum expected: 120.1ms)

\- GeoPlausible: False

\- Violation: RTT 19.0ms \< minimum possible 120.1ms for 6003km

This discrepancy indicates the claimed geolocation is unreliable and may require cross-validation.

\---

\### Control Plane & Routing

\- **Origin ASN:** 396356

\- **BGP Prefix:** 173.239.240.0/24

\- **Route Stability:** False (Not stable)

\- **iBGP/MOAS:** False

\- **DNSSEC:** Valid

\- **DNSBL Listed:** 0/8 lists

\---

\### Recommended Actions

**No immediate defensive actions required.** The IP presents minimal risk with no active threat indicators.

**For SOC Analysts:**

1. **No firewall blocking recommended** — IP is low risk

2. **Monitor geolocation discrepancy** — Validate claimed NJ location against actual network routing

3. **Subnet context** — 96% of subnet peers are low risk; minimal lateral threat concern

4. **Baseline behavior** — No open services; treat as firewalled infrastructure

\---

**Intelligence Confidence:** High (based on 16 observation signals, no contradictory threat data)

**Last Updated:** 2026-07-28T16:58:17 UTC

## Nearby addresses

- 173.239.240.5 (https://ipdebrief.com/173.239.240.5)
- 173.239.240.6 (https://ipdebrief.com/173.239.240.6)
- 173.239.240.9 (https://ipdebrief.com/173.239.240.9)
- 173.239.240.15 (https://ipdebrief.com/173.239.240.15)
- 173.239.240.18 (https://ipdebrief.com/173.239.240.18)
- 173.239.240.24 (https://ipdebrief.com/173.239.240.24)
- 173.239.240.27 (https://ipdebrief.com/173.239.240.27)
- 173.239.240.34 (https://ipdebrief.com/173.239.240.34)
- 173.239.240.35 (https://ipdebrief.com/173.239.240.35)
- 173.239.240.36 (https://ipdebrief.com/173.239.240.36)
- 173.239.240.37 (https://ipdebrief.com/173.239.240.37)
- 173.239.240.38 (https://ipdebrief.com/173.239.240.38)

---

Source: IPDebrief, "173.239.240.130 IP intelligence", https://ipdebrief.com/173.239.240.130, updated 2026-10-28. Assessments are probabilistic.