173.234.225.216📋 Copy

IP INTELLIGENCE BRIEFING: 173.234.225.216/32

Classification: Moderate Risk | Risk Score: 40 | Status: Active Threat Indicator

1. OWNERSHIP & INFRASTRUCTURE

The IP address 173.234.225.216 is registered to ASN 394380, operated by Leaseweb USA, Inc. (Choopa/GameServers). The network is located in Dallas, Texas, United States, within the Dallas metro area. The infrastructure type is classified as colocation hosting. The IP has no open ports or active services detected during scanning.

2. THREAT ASSESSMENT

The IP address carries a risk score of 40, designated as Moderate Risk. Threat indicators show the IP is not identified as a known attacker, Tor exit node, proxy, or VPN service. No spam source indicators or known campaign associations were detected. The IP appears on one DNS blacklist (of 8 total lists checked), though the primary blacklist count shows zero.

3. NETWORK CONTEXT & NEIGHBORHOOD ANALYSIS

The IP resides in the 173.234.225.0/24 subnet, classified as high_abuse with an abuse density score of 0.8945. Of the 256 total sibling addresses in the subnet, 188 were active during assessment, with 229 flagged as threats. The inherited risk from the subnet is 35. All 100 sampled neighbors in the immediate neighborhood showed medium-level risk (risk score 50), indicating systemic risk within the /24 block.

4. OBSERVATION HISTORY

Forty-seven observations were recorded for this IP. The most recent signals (2026-06-24) confirm the provider classification as Choopa/GameServers with colocation hosting infrastructure. Geolocation confidence was low (0.35), though consistent with US deployment. The IP was detected on eight blacklist sources, with the maximum severity listed as high.

5. RELATIONSHIP ANALYSIS

The relationship graph contains 163 entries, all of the "Same Network" type (LU-79), indicating extensive network-level associations within the same routing prefix. No hostname, organization, or certificate relationships were identified beyond the network scope.

6. CONTROL PLANE DATA

BGP prefix 173.234.225.0/24 originates from ASN 394380. Route stability is marked as false with zero route changes in the past 30 days. DNSSEC validation is active, and CAA records are present. Operator score is 0.2174, labeled as Minimal.

7. RECOMMENDED ACTIONS

Firewall and WAF rules were generated for the following platforms:

• iptables: DROP traffic from 173.234.225.216
• nftables: Drop rule for source address 173.234.225.216
• nginx: Deny rule for the IP address
• pfSense: Block 173.234.225.216/32
• Cloudflare WAF: Block action with expression filter on source IP
• AWS WAF: Add 173.234.225.216/32 to block list

8. INTELLIGENCE SUMMARY

IP 173.234.225.216 is a Choopa/GameServers hosting infrastructure address with moderate risk rating. The IP is part of a high-abuse-density subnet (0.8945) where 89% of addresses show threat indicators. While the IP itself shows no active service exposure, the neighborhood context suggests systemic abuse patterns. The single DNSBL listing with high severity provides actionable intelligence for blocking. Recommended defensive posture: implement firewall rules to block the IP address at perimeter and WAF layers.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.