173.234.227.76
## IP Intelligence Briefing: 173.234.227.76/32
Classification: Moderate Risk | Last Updated: 2026-06-19
Infrastructure Profile
IP 173.234.227.76 is hosted on Leaseweb USA, Inc. (ASN 394380) infrastructure in Dallas, Texas. The IP is classified as colocation hosting infrastructure with network role designation as Choopa/GameServers provider. No active services or open ports are detected; the system is firewalled with no public-facing services.
Risk Assessment
- Overall Risk Score: 50 (Moderate Risk)
- DNSBL Listings: 2 of 8 total lists (DNSBL listed)
- Known Threat Indicators: None
- Tor/VPN/Proxy: Not detected
- Campaign Association: None identified
Neighborhood Analysis (CRITICAL)
The /24 subnet (173.234.227.0/24) exhibits high abuse classification with an abuse density of 0.9336. Of 256 total sibling IPs:
- 205 active siblings
- 239 threat siblings
- All 100 sampled neighbors scored risk 50 (medium risk)
This indicates the IP resides in a heavily utilized hosting environment with significant abuse correlation.
Observation History
Forty-three total observations recorded. Recent signal activity (June 18-19, 2026) shows consistent minimal operator scores (0.1304) with no escalating threat patterns. No threat persistence observed (0 threat persistence days). Single threat observation counted.
Relationships
131 relationships identified, primarily same-network associations to LU-79 network designation.
Recommended Actions
Given the moderate risk profile and high-abuse neighborhood context:
1. Monitor inbound/outbound traffic for anomalies
2. Block if any outbound malicious connections are observed
3. No immediate blocking recommended for inbound traffic unless specific threat indicators are confirmed
4. Correlate with other IPs in the /24 subnet for potential lateral movement analysis
Intelligence Summary
IP 173.234.227.76 represents moderate risk within a high-abuse hosting environment. The infrastructure shows no current malicious indicators but exists in a subnet with 93% abuse density. SOC teams should monitor for abnormal activity patterns rather than preemptive blocking, while maintaining awareness of the surrounding neighborhood's threat profile.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Leaseweb USA, Inc. |
| ASN | AS394380 |
| Network Name | — |
| CIDR Block | — |
| RIR | ARIN |
| Country | — |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 40% | 2 | 5 |
| routing | 45% | 1 | 5 |
| services | 12% | 2 | 2 |
| ownership | 20% | 2 | 3 |
| reputation | 28% | 1 | 3 |
| geolocation | 30% | 2 | 3 |
| Overall | 29% | 10 | 21 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-07 23:05:04 UTC |
| Last Seen | 2026-06-27 11:28:36 UTC |
| Profile Built | 2026-06-28 05:34:36 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 50 |
Full dossier details are available via our API.