173.234.227.153
# INTELLIGENCE BRIEFING: 173.234.227.153/32
Classification: Moderate Risk | Date: 2026-06-19 | Analyst: IPDebrief Intelligence
---
## EXECUTIVE SUMMARY
IP 173.234.227.153 is a colocation hosting address operated by Leaseweb USA, Inc. (ASN: 394380) within the Dallas, TX infrastructure. The IP carries a moderate risk score of 50 and is embedded in a high-abuse density subnet (173.234.227.0/24). No active services are exposed on this address, and no known threat indicators or campaigns have been observed.
---
## OWNERSHIP & INFRASTRUCTURE
- Organization: Leaseweb USA, Inc.
- ASN: 394380 (Choopa/GameServers)
- Location: Dallas, TX, US (ARIN)
- Infrastructure Type: Colocation Hosting
- Network Role: Hosting (Firewalled / No Services)
- Registration: RIR: ARIN
---
## THREAT PROFILE
| Metric | Value |
|---|---|
| **Risk Score** | 50 (Moderate Risk) |
| **Abuse Confidence** | Not applicable (no active services) |
| **DNSBL Listings** | 2 of 8 lists |
| **Tor Exit Node** | No |
| **Known Attacker** | No |
| **Spam Source** | No |
| **Campaign Likelihood** | None |
---
## NETWORK CONTEXT
Subnet Analysis: 173.234.227.0/24
- Abuse Density: 0.9453 (High)
- Classification: high_abuse
- Total Siblings: 256
- Active Siblings: 205
- Threat Siblings: 242
- Inherited Risk: 37
Relationship Graph: 149 relationships detected, primarily same-network clustering (LU-79).
---
## OBSERVATION HISTORY
45 historical observations recorded. Recent temporal analysis shows:
- Abuse Density Trend: 0.7969 (high_abuse classification)
- Inherited Risk Range: 31-37
- Operator Score: 0.1304 (Minimal)
- Threat Persistence: 0 days
- Ownership Changes: 0
No evidence of escalating malicious behavior over the observation period.
---
## SERVICES & DNS
- Open Ports: None detected
- TLS Certificate: None
- HTTP Banner: None
- DNS Records: 0 forward hostnames, 0 TXT records
- Email Auth: No SPF/DMARC records
- Service Purpose: Firewalled / No Services
---
## RECOMMENDED ACTIONS
Detection & Monitoring
- Monitor: 173.234.227.0/24 subnet for abuse correlation
- Alert Threshold: Risk score > 50 with active service exposure
- Correlation: Track 242 threat siblings in subnet for lateral movement indicators
Mitigation
- No immediate blocking required for this specific IP (no active services)
- Consider subnet-level filtering if legitimate traffic from this IP is not expected
- Monitor DNSBL listing changes (currently 2 of 8 lists)
Investigation Priorities
1. Verify if this IP is expected in your traffic baseline
2. Investigate origin of DNSBL listings
3. Monitor 173.234.227.0/24 for coordinated abuse campaigns
---
END OF BRIEFING
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Leaseweb USA, Inc. |
| ASN | AS394380 |
| Network Name | — |
| CIDR Block | — |
| RIR | ARIN |
| Country | — |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 24% | 2 | 4 |
| routing | 43% | 1 | 5 |
| services | 12% | 2 | 2 |
| ownership | 20% | 2 | 3 |
| reputation | 28% | 1 | 3 |
| geolocation | 30% | 2 | 3 |
| Overall | 26% | 10 | 20 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-07 23:05:04 UTC |
| Last Seen | 2026-06-27 11:41:33 UTC |
| Profile Built | 2026-06-28 05:47:04 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 49 |
Full dossier details are available via our API.