173.239.254.178📋 Copy

# IP Intelligence Briefing: 173.239.254.178

## Executive Summary

IP 173.239.254.178 presents a low-risk profile with a risk score of 25/100. The address is associated with LOGICWEB (ASN 206092) in Seattle, Washington. No active threat indicators, malware campaigns, or malicious activity detected. Recommended status: Monitor but no immediate blocking action required.

## Network Profile

## Threat Assessment

• Abuse Confidence: Not applicable (no abuse activity)
• Threat Indicators: None detected
• Blacklist Status: Not listed on major threat feeds
• Known Campaigns: None associated
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Malware Distribution: No

## Observations & History

Signal observation history indicates 14 recorded observations with the following characteristics:

• Recent Activity: Most recent observation recorded July 23, 2026
• Threat Persistence: 0 days (not persistently malicious)
• Threat Observations: 0
• Ownership Changes: 0
• Geolocation Consensus: Validated across multiple sources
• Network Classification: Consistently classified as clean

## Neighborhood Analysis (173.239.254.0/24)

• Total Siblings: 61 IPs
• Active Siblings: 15
• Threat Siblings: 1
• Abuse Density: 0.0164 (minimal)
• Subnet Classification: Clean
• Risk Distribution: 0 high-risk, 1 medium-risk, 21 low-risk IPs

## Infrastructure Analysis

• Open Ports: None detected
• DNS Resolution: No PTR hostnames; forward resolution not confirmed
• Services: No active services detected
• TLS Certificates: None
• HTTP Services: None (firewalled)
• Email Reputation: Not configured (no SPF/DMARC records)

## Control Plane Data

• BGP Prefix: 173.239.254.0/24
• Route Stability: Unstable
• MoAS Status: No
• DNSSEC Valid: Yes
• Operator Score: 0.1304 (Minimal)

## SOC Actionable Intelligence

Recommended Actions:

1. No immediate blocking required – Risk score of 25 indicates low threat level

2. Monitor subnet 173.239.254.0/24 – One threat sibling detected within neighborhood; monitor for lateral movement patterns

3. Log traffic patterns – Track any unusual activity from this IP for baseline comparison

4. No firewall rules generated – No specific recommendations from automated analysis

Key Indicators:

• No threat indicators present
• No known campaigns associated
• Clean subnet classification
• Stable ownership with no recent changes

Conclusion: This IP represents a low-risk infrastructure address with no evidence of malicious activity. Standard monitoring practices apply. The single threat sibling in the neighborhood warrants awareness but does not require immediate escalation.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.