173.234.226.91📋 Copy

# IP Intelligence Briefing: 173.234.226.91

Classification: Hosting Infrastructure (Choopa/GameServers)

Risk Level: Moderate Risk (Score: 50)

Reporting Time: 2026-06-24

## 1. Executive Summary

IP address 173.234.226.91 is a US-based hosting infrastructure address operated by Leaseweb USA, Inc. (ASN: 394380). The IP is classified as Choopa/GameServers hosting with no active services detected (firewalled/no services). While the IP itself shows moderate risk (50), it resides within a high-abuse density subnet (173.234.226.0/24) with 71.88% abuse density and 184 of 236 active siblings classified as threat sources.

## 2. Network Ownership & Infrastructure

Control Plane: BGP prefix 173.234.226.0/24 shows unstable routing configuration. RPKI state unavailable. Operator score: 0.1304 (Minimal). DNSSEC valid.

## 3. Threat Assessment

Threat Indicators:

• No active threat indicators detected
• Not listed on major threat feeds
• Not a Tor exit node or known attacker
• Blacklist count: 0 (but listed on 2 of 8 DNSBLs checked)
• No known malicious campaigns associated

Abuse Indicators:

• DNSBL listed: 2/8 total lists
• Reputation sources: Limited (1)
• Abuse confidence: Not explicitly scored in profile

## 4. Neighborhood Analysis (173.234.226.0/24)

Subnet Risk Profile:

• Abuse Density: 0.7188 (High Abuse)
• Total Subnet Size: 256 IPs
• Active Siblings: 236
• Threat Siblings: 184
• Risk Distribution: 100 medium-risk IPs detected

Sample Neighbor Risk Scores:

• 173.234.226.0: Risk 50, Authority 50
• 173.234.226.1: Risk 50, Authority 50
• 173.234.226.2: Risk 50, Authority 50
• 173.234.226.3: Risk 50, Authority 50
• 173.234.226.4: Risk 50, Authority 50

Assessment: The entire /24 subnet exhibits uniform risk characteristics, indicating shared infrastructure with elevated abuse potential.

## 5. Service & DNS Status

Services: No open ports detected. Connection attempts would likely encounter firewall blocks.

DNS:

• PTR Hostnames: None resolved
• Forward Resolution: Confirmed false
• Hosted Domains: 0
• Email Authentication: No SPF/DMARC records
• Forward Hostnames: 0 entries

HTTP/HTTPS: No service response. HTTP title, TLS certificate, and server banner all null.

## 6. Historical Observations (44 Total Signals)

Recent Observations (2026-06-24):

• 12:46 UTC: ASN 394380 confirmed via Team Cymru DNS
• 12:45 UTC: Provider classification "Choopa/GameServers" confirmed
• 08:09 UTC: Operator score 0.1304 (Minimal)
• 02:06 UTC: Consistent operator score observations

Temporal Indicators:

• Ownership changes: 0
• Threat observation count: 1
• Is persistently malicious: No
• Threat persistence days: 0

## 7. Recommended Actions

Immediate Firewall Recommendations:

```bash

# iptables

iptables -A INPUT -s 173.234.226.91 -j DROP

# nftables

nft add rule inet filter input ip saddr 173.234.226.91 drop

# nginx

deny 173.234.226.91;

# pfSense

173.234.226.91/32

# Cloudflare WAF

Block IP 173.234.226.91 — IPDebrief risk score 50

# AWS WAF

Addresses: ["173.234.226.91/32"]

Description: IPDebrief risk 50

```

## 8. Intelligence Assessment

Key Findings:

1. Infrastructure Type: Shared hosting infrastructure with GameServer optimization

2. Subnet Risk: Elevated abuse density (0.7188) warrants subnet-level monitoring

3. Service Availability: Firewalled state prevents direct service enumeration

4. DNSBL Presence: Listed on 2 of 8 DNSBLs indicates some level of reputation issues

5. Historical Stability: Limited threat persistence observed (1 observation)

Recommended SOC Actions:

• Monitor subnet 173.234.226.0/24 for anomalous traffic patterns
• Implement IP-level blocking per recommended firewall rules
• Correlate with threat intelligence feeds for associated malicious activity
• Consider implementing rate limiting for entire /24 prefix if traffic thresholds exceed baseline

Confidence Level: High (Multiple signal types confirm infrastructure classification and subnet abuse density)

---

*Intelligence generated by IPDebrief. All data sourced from real-time network observations and threat intelligence feeds.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.