108.62.56.208📋 Copy

# IP Intelligence Briefing: 108.62.56.208/32

## Executive Summary

IP address 108.62.56.208 is classified as Low Risk with an overall risk score of 25. The IP is associated with LeaseWeb USA, Inc. Seattle (ASN 396190) and resolves to the domain cloudradium.com. While the IP itself shows minimal direct threat indicators, DNS blacklist presence and moderate neighborhood abuse density warrant monitoring.

---

## Technical Profile

Ownership & Classification:

• ASN: 396190 (LEASEWEB-USA-SEA - Leaseweb USA, Inc., US)
• Organization: LeaseWeb USA, Inc. Seattle
• Geolocation: Seattle, WA, United States (47.61°N, 122.33°W)
• Network Block: 108.62.56.0/21
• Status: Firewalled / No Services Detected

Network Role:

• Infrastructure Type: Unknown
• Cloud/CDN/Proxy/VPN: Negative indicators across all categories
• Anycast: No
• Mobile/Residential: No

DNS Resolution:

• PTR Hostname: 108.62.56.208.rdns.cloudradium.com
• Forward Resolution: 108.62.56.208.rdns.cloudradium.com (cloudradium.com)
• Email Authentication: SPF present, DMARC absent

---

## Threat Indicators

Current Risk Assessment:

• Risk Score: 25 (Low Risk)
• Abuse Confidence Score: Not available
• Threat Feed Indicators: None
• Known Campaigns: None
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

Blacklist Status:

• DNSBL Listed: 1 of 8 total lists
• Blacklist Count: 0 (traditional blacklists)
• Pulsedive Risk: Not applicable

---

## Observation History

Signal Count: 19 observations recorded

Recent Activity Timeline:

• 2026-06-24: Multiple signal observations including reputation and geolocation assessments
• 2026-06-24 06:40:27: DNS operator score: 0 (Minimal)
• 2026-06-10: ASN and geolocation confirmations
• Ownership Changes: 0 (stable)
• Threat Observation Count: 1
• Persistence Days: 0 (not persistently malicious)

---

## Neighborhood Analysis

Subnet: 108.62.56.208/24

• Abuse Density: 0.04 (4%)
• Classification: Mostly Clean
• Total Siblings: 256
• Active Siblings: 66
• Threat Siblings: 35
• Inherited Risk: 5

Risk Distribution (100 sampled neighbors):

• High Risk: 4 IPs
• Medium Risk: 93 IPs
• Low Risk: 3 IPs

Notable Neighbor IPs:

• 108.62.56.0 through 108.62.56.4: Risk Score 50, Authority Score 50
• Multiple neighbors showing elevated risk scores

---

## Control Plane Data

• BGP Prefix: 108.62.56.0/21
• Route Stability: False
• Route Changes (30d): 0
• RPKI State: Not validated
• DNSSEC: Valid
• Operator Score: 0.1304 (Minimal)
• Delegation Age: Not available

---

## Recommended Actions

Based on the risk profile and observed indicators:

1. Monitoring: No immediate blocking required; maintain passive monitoring

2. DNSBL Verification: Investigate the single DNSBL listing to determine severity

3. Traffic Analysis: Monitor for any service activation on previously firewalled ports

4. Neighbor Correlation: Investigate the 35 threat siblings within the /24 for potential coordinated activity

5. Email Filtering: SPF present but DMARC absent—verify mail flow policies

---

## Risk Assessment Conclusion

IP 108.62.56.208 presents low immediate threat but requires awareness due to:

• Single DNSBL listing requiring verification
• Elevated risk scores among neighborhood peers
• Network route instability
• Association with cloudradium.com infrastructure

Recommendation: Maintain passive monitoring; escalate if DNSBL listings increase or if the IP begins exhibiting active service patterns or threat indicators.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.