173.234.225.93📋 Copy

IP Intelligence Briefing: 173.234.225.93

Date: 2026-06-14

---

**1. Core Profile**

• Risk Score: Moderate (50/100)
• Provider: Leaseweb USA, Inc. (Hosting/Colocation)
• Geolocation: Dallas, Texas, US (TX)
• Network Role: Hosting (Firewalled / No Services)
• Threat Indicators: None detected (no malware, phishing, or C2 activity).

---

**2. Observation History**

• Activity Trends:

- Consistently low risk over the past 30 days (operator score: "Minimal").

- No persistent malicious activity or threat persistence.

• Validation Limitations:

- ICMP blocked, preventing full geolocation validation.

---

**3. Network Relationships**

• Linked Networks: Subnet LU-79 (173.234.224.0/22).
• Key Associations:

- No direct ties to known malicious campaigns, domains, or organizations.

- Hosting provider infrastructure (no CDN, VPN, or proxy detection).

---

**4. Subnet Analysis**

• Subnet: 173.234.225.93/24
• Neighbor Risk:

- 100 IPs in subnet (256 total).

- Abuse Density: 0.8359 (high risk in subnet).

- Active Siblings: 179 (214 flagged as threats).

• Inherited Risk: 33% (substantial risk from neighboring IPs).

---

**5. Critical Findings**

• Hosting Environment: Leaseweb IP with no open services or TLS certificates.
• Subnet Alert: High abuse density in the /24 subnet despite the IP itself being clean.
• Validation Gaps: ICMP blocking limits geolocation accuracy.

---

**6. Recommendations**

• Monitor Subnet: Investigate the 173.234.224.0/22 subnet for potential lateral movement or compromised hosts.
• Enhance Validation: Use alternative methods (e.g., DNS probes) to validate geolocation.
• Check Hosting Logs: Confirm Leaseweb’s compliance with security practices for hosted environments.
• Subnet Segmentation: Consider isolating high-risk neighbors to mitigate potential exposure.

---

End of Briefing

*Generated by IPDebrief for SOC operational use.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.