173.234.225.10
IP Intelligence Briefing: 173.234.225.10
*Generated via IPDebrief Threat Intelligence Platform*
---
**Core Profile**
- Risk Score: Moderate (50/100)
- Ownership: Leaseweb USA, Inc. (AS394380)
- Geolocation: Dallas, TX, US (latitude: 39.83, longitude: -98.58)
- Network Role: Hosting server (ColocationHosting)
- Threat Indicators: None detected (no malware, spam, or known attacker associations)
---
**Observation History**
- Latest Activity: June 14, 2026 (confidence: 0.35)
- Key Trends:
- Stable ownership with no recent changes.
- Moderate risk persistence (no upward trend in threats).
- Geolocation data consistently indicates Dallas, TX.
- Low confidence in some signals (e.g., ICMP validation failed).
---
**Network Relationships**
- Subnet: 173.234.225.0/24 (part of LU-79 network)
- Neighbors:
- 100 IPs in subnet (all rated "medium" risk).
- Abuse density: 0% (no confirmed malicious activity in subnet).
- Connections:
- Linked to Leaseweb USA, Inc. (AS394380).
- No Tor, CDN, or mobile carrier associations.
---
**Threat Context**
- No Malicious Indicators: No DNS, TLS, or service anomalies detected.
- Hosting Risk: As a hosting provider, this IP could be used for command-and-control (C2) or data exfiltration. Monitor for unexpected outbound traffic.
- Subnet Context: While the subnet has a moderate risk score, no direct abuse activity is reported.
---
**Recommended Actions**
1. Monitor Traffic: Track outbound connections for signs of C2 or data exfiltration.
2. Verify Ownership: Confirm Leaseweb’s compliance practices, as hosting providers can host malicious activity.
3. Subnet Analysis: Investigate neighboring IPs (e.g., 173.234.225.0–255) for potential lateral movement.
4. Geolocation Validation: Use alternative methods (e.g., traceroute) to confirm Dallas, TX location due to ICMP blocking.
---
Note: This IP appears benign but warrants monitoring due to its hosting role and subnet context. No immediate mitigation required unless suspicious activity is detected.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Leaseweb USA, Inc. |
| ASN | AS394380 |
| Network Name | — |
| CIDR Block | — |
| RIR | ARIN |
| Country | — |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 3 |
| routing | 45% | 1 | 6 |
| services | 8% | 1 | 1 |
| ownership | 24% | 2 | 3 |
| reputation | 31% | 1 | 3 |
| geolocation | 30% | 2 | 3 |
| Overall | 29% | 9 | 19 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-07 23:05:01 UTC |
| Last Seen | 2026-06-27 09:51:33 UTC |
| Profile Built | 2026-06-28 03:57:08 UTC |
| Data Freshness | Live |
| Signal Types | 17 |
| Total Observations | 45 |
Full dossier details are available via our API.