173.239.240.221📋 Copy

# IP Intelligence Briefing: 173.239.240.221

## Executive Summary

IP address 173.239.240.221 is classified as Low Risk with an overall risk score of 25. The address belongs to NSQ-VENTURE (Private Customer) within the 173.239.240.0/24 subnet in New York, US. Current analysis indicates minimal threat activity and no active malicious indicators.

## Technical Profile

• Risk Score: 25 (Low Risk)
• ASN: 396356 (LATITUDE-SH)
• Organization: NSQ-VENTURE (Private Customer)
• Netname: NSQ-VENTURE
• Location: New York, US (US-NY)
• CIDR Block: 173.239.240.0/24
• Registration: ARIN
• Timezone: America/New_York

## Threat Assessment

• Blacklist Status: 0 current listings (1 historical DNSBL listing noted)
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Known Campaigns: None detected

## Network Services

• Open Ports: None detected (firewalled/no services)
• DNS Resolution: No PTR record, forward resolution disabled
• Email Authentication: No SPF/DMARC records
• HTTP Services: No active web services detected
• TLS Certificates: None

## Neighborhood Analysis (173.239.240.0/24)

• Total Subnet Size: 254 active IPs
• Abuse Density: 0
• Risk Distribution: 61 low-risk, 3 medium-risk, 0 high-risk
• Target IP Classification: Consistent with subnet baseline (risk score 25)

## Historical Observations

Nine signal observations recorded, most recent on 2026-07-22:

• DNSSEC: Valid
• ASN Confirmation: 396356 (LATITUDE-SH)
• Geolocation: US
• Threat Signals: 1 DNSBL listing (high severity noted in historical data)
• PTR Records: None

## Behavioral Indicators

• Honeypot Hits: 0
• Enumeration Strikes: 0
• WAF Violations: 0
• Total Incidents: 0
• Auto-Banned: No

## Network Routing

• BGP Prefix: 173.239.240.0/24
• Route Stability: Unstable
• 30-Day Route Changes: 0
• DNSSEC Valid: Yes
• Transit Networks: Comcast, Cogent
• Traceroute: 13 hops, 2 timeouts

## Relationship Graph

• Same Network Relationships: 2 (NSQ-VENTURE network)
• Correlated IPs: None detected
• Certificates: None

## Recommended Security Actions

No specific firewall rules or blocking recommendations generated. The IP presents minimal threat indicators and does not warrant immediate defensive action. Standard monitoring practices are sufficient.

## Intelligence Conclusion

173.239.240.221 represents a low-risk infrastructure asset with no active malicious behavior. The subnet demonstrates healthy abuse density metrics. No correlation with known threat campaigns or attacker infrastructure. Maintain standard monitoring; no immediate blocking required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.