# 173.239.254.178 — IP Intelligence Summary

173.239.254.178 is an IPv4 address operated by Private Customer (AS206092), geolocated to Seattle, United States. As of September 13, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/173.239.254.178
- Last updated: 2026-09-13

## Ownership

- Organization: Private Customer
- Network name: LOGICWEB
- Allocated block: 173.239.254.0/24
- ASN: AS206092 (https://ipdebrief.com/asn/206092)
- Regional registry: ARIN

## Location

- City: Seattle
- Region: Washington
- Country: United States
- Time zone: —

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\# IP Intelligence Briefing: 173.239.254.178

\## Executive Summary

IP 173.239.254.178 presents a low-risk profile with a risk score of 25/100. The address is associated with LOGICWEB (ASN 206092) in Seattle, Washington. No active threat indicators, malware campaigns, or malicious activity detected. Recommended status: Monitor but no immediate blocking action required.

\## Network Profile

| Attribute | Value |

|-----------|-------|

| **IP Address** | 173.239.254.178/32 |

| **Risk Score** | 25 (Low Risk) |

| **ASN** | 206092 |

| **Organization** | Private Customer (LOGICWEB) |

| **CIDR Block** | 173.239.254.0/24 |

| **Geolocation** | Seattle, WA, US (47.75°N, -120.74°W) |

| **Network Role** | Firewalled / No Services |

\## Threat Assessment

\- **Abuse Confidence:** Not applicable (no abuse activity)

\- **Threat Indicators:** None detected

\- **Blacklist Status:** Not listed on major threat feeds

\- **Known Campaigns:** None associated

\- **Tor Exit Node:** No

\- **Known Attacker:** No

\- **Spam Source:** No

\- **Malware Distribution:** No

\## Observations & History

Signal observation history indicates 14 recorded observations with the following characteristics:

\- **Recent Activity:** Most recent observation recorded July 23, 2026

\- **Threat Persistence:** 0 days (not persistently malicious)

\- **Threat Observations:** 0

\- **Ownership Changes:** 0

\- **Geolocation Consensus:** Validated across multiple sources

\- **Network Classification:** Consistently classified as clean

\## Neighborhood Analysis (173.239.254.0/24)

\- **Total Siblings:** 61 IPs

\- **Active Siblings:** 15

\- **Threat Siblings:** 1

\- **Abuse Density:** 0.0164 (minimal)

\- **Subnet Classification:** Clean

\- **Risk Distribution:** 0 high-risk, 1 medium-risk, 21 low-risk IPs

\## Infrastructure Analysis

\- **Open Ports:** None detected

\- **DNS Resolution:** No PTR hostnames; forward resolution not confirmed

\- **Services:** No active services detected

\- **TLS Certificates:** None

\- **HTTP Services:** None (firewalled)

\- **Email Reputation:** Not configured (no SPF/DMARC records)

\## Control Plane Data

\- **BGP Prefix:** 173.239.254.0/24

\- **Route Stability:** Unstable

\- **MoAS Status:** No

\- **DNSSEC Valid:** Yes

\- **Operator Score:** 0.1304 (Minimal)

\## SOC Actionable Intelligence

**Recommended Actions:**

1. **No immediate blocking required** – Risk score of 25 indicates low threat level

2. **Monitor subnet 173.239.254.0/24** – One threat sibling detected within neighborhood; monitor for lateral movement patterns

3. **Log traffic patterns** – Track any unusual activity from this IP for baseline comparison

4. **No firewall rules generated** – No specific recommendations from automated analysis

**Key Indicators:**

\- No threat indicators present

\- No known campaigns associated

\- Clean subnet classification

\- Stable ownership with no recent changes

**Conclusion:** This IP represents a low-risk infrastructure address with no evidence of malicious activity. Standard monitoring practices apply. The single threat sibling in the neighborhood warrants awareness but does not require immediate escalation.

## Nearby addresses

- 173.239.254.1 (https://ipdebrief.com/173.239.254.1)
- 173.239.254.2 (https://ipdebrief.com/173.239.254.2)
- 173.239.254.4 (https://ipdebrief.com/173.239.254.4)
- 173.239.254.31 (https://ipdebrief.com/173.239.254.31)
- 173.239.254.41 (https://ipdebrief.com/173.239.254.41)
- 173.239.254.42 (https://ipdebrief.com/173.239.254.42)
- 173.239.254.44 (https://ipdebrief.com/173.239.254.44)
- 173.239.254.48 (https://ipdebrief.com/173.239.254.48)
- 173.239.254.49 (https://ipdebrief.com/173.239.254.49)
- 173.239.254.51 (https://ipdebrief.com/173.239.254.51)
- 173.239.254.54 (https://ipdebrief.com/173.239.254.54)
- 173.239.254.57 (https://ipdebrief.com/173.239.254.57)

---

Source: IPDebrief, "173.239.254.178 IP intelligence", https://ipdebrief.com/173.239.254.178, updated 2026-09-13. Assessments are probabilistic.