173.234.227.126📋 Copy

# IP Intelligence Briefing: 173.234.227.126/32

Classification: Moderate Risk / High-Abuse Neighborhood

Analysis Date: 2026-06-19

Target: 173.234.227.126

## Executive Summary

The target IP 173.234.227.126 is located within a high-abuse density colocation hosting network in Dallas, TX. While the individual IP shows no active malicious indicators, it operates in a subnet with 94.53% abuse density, classified as HIGH_ABUSE. The IP is assigned to Leaseweb USA, Inc. (ASN 394380) and is categorized under Choopa/GameServers infrastructure.

## Risk Profile

• Overall Risk Score: 50/100 (Moderate Risk)
• Provider Score: 0
• Authority Score: 0
• Operator Score: 0.2174 (Minimal)
• Stability Label: None recorded

## Network Classification

• Infrastructure Type: Colocation Hosting
• Network Role: Choopa/GameServers
• Service Purpose: Firewalled / No Services
• Open Ports: None detected
• DNSBL Listed: 2 of 8 total lists
• Tor Exit: No
• Known Attacker: No
• Spam Source: No

## Geographic Location

• Country: United States (US)
• Region: Texas (TX)
• City: Dallas
• AS Path: Origin ASN 394380
• BGP Prefix: 173.234.224.0/22

## Neighborhood Analysis

The target IP resides within subnet 173.234.227.0/24:

• Total Siblings: 256
• Active Siblings: 205
• Threat Siblings: 242
• Abuse Density: 0.9453 (94.53%)
• Classification: High Abuse
• Inherited Risk: 37

Neighboring IP analysis reveals 100 sampled neighbors with risk distribution: 100 medium-risk IPs, 0 high-risk IPs, 0 low-risk IPs. This indicates systemic risk across the /24 block.

## Historical Observations

• Total Observations: 47
• Latest Observation: 2026-06-19T08:04:23
• Observation Pattern: Consistent control plane/routing signals (signal type 2349)
• Operator Score Trend: Stable at 0.2174 (Minimal)
• Threat Persistence: 0 days
• Persistence Classification: Not persistently malicious

## Relationship Graph

• Total Relationships: 172
• Primary Relationship Type: Same Network (LU-79)
• Related Networks: Multiple LU-79 network associations

## Threat Indicators

• Active Threat Indicators: None
• Known Campaigns: 0
• Cert Matches: 0
• Correlated IPs: 0
• Campaign Likelihood: None

## Recommended Security Actions

No specific firewall rules or blocking recommendations generated. The IP is currently classified as Moderate Risk with no active malicious indicators.

## Intelligence Assessment

This IP operates within a colocation hosting environment (Choopa/GameServers) that exhibits high-abuse characteristics. The 94.53% abuse density of the /24 subnet suggests the infrastructure is frequently leveraged for malicious activity. While 173.234.227.126 shows no current threat indicators, the neighborhood context warrants defensive positioning.

Recommended SOC Actions:

1. Monitor traffic patterns from this /24 subnet for anomalous behavior

2. Consider geographic-based filtering if traffic volume warrants

3. Maintain awareness of potential reputation degradation due to neighborhood context

4. No immediate blocking recommended; observe for threat indicator emergence

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.