108.62.57.236📋 Copy

INTELLIGENCE BRIEFING: IP 108.62.57.236

Classification: Low Risk / Monitoring Recommended

Date: Current

Analyst: Automated Intelligence System

---

**IDENTITY & OWNERSHIP**

The IP address 108.62.57.236 is allocated to LeaseWeb USA, Inc. Seattle under ASN 396190 within the ARIN registry. The IP resolves to the domain 3e.vc with PTR record 108.62.57.236.rdns.3e.vc. Geographic positioning indicates Seattle, WA, US with 2,500 km accuracy radius.

Network Classification: Provider infrastructure, firewalled with no active services.

---

**RISK ASSESSMENT**

• Overall Risk Score: 25/100 (Low Risk)
• Provider Score: 0
• Authority Score: 0
• Operator Score: 0.2174 (Minimal)

Threat Indicators: None detected. IP is not classified as Tor exit, known attacker, or spam source. No active threat feeds correlate.

DNSBL Status: Listed on 1 of 8 known DNSBLs.

---

**NEIGHBORHOOD ANALYSIS**

The /24 subnet (108.62.57.0/24) shows elevated abuse density:

• Abuse Density: 39.45%
• Threat Siblings: 101 of 256 IPs flagged as threats
• Inherited Risk: 15/100
• Classification: Mixed

The subnet contains 75 active sibling IPs. Neighbor analysis reveals 99 medium-risk IPs with authority score 50.

---

**OBSERVATION HISTORY**

25 historical observations recorded. Recent signals (2026-06-24) include:

• DNS configuration changes for domain 3e.vc
• Operator score maintained at "Minimal" (0.1 raw score)
• Geolocation validation from US sources (low confidence 0.35)
• One listing signal with maximum severity "high" across 2 of 8 lists

Threat observation count: 1. No persistent malicious behavior detected.

---

**RELATIONSHIP GRAPH**

63 relationships identified, primarily Same Network associations to BGP prefix 108.62.56.0/21. No external entity associations (organizations, certificates, hostnames) detected beyond network-level relationships.

---

**RECOMMENDED ACTIONS**

Current Status: No immediate firewall rules or blocking recommended based on risk profile alone.

Monitoring Triggers:

1. DNSBL Listings: Monitor for additional blacklistings (currently 1/8 lists)

2. Subnet Activity: 39.45% abuse density in /24 warrants ongoing neighborhood monitoring

3. Service Changes: Verify continued firewalled status; any open service discovery should trigger elevated review

Firewall Rule: Not required at this time. Standard provider IP traffic flow permitted.

---

**INTELLIGENCE SUMMARY**

IP 108.62.57.236 represents low-risk provider infrastructure under LeaseWeb USA. While the immediate risk score is 25 with no active threat indicators, the surrounding /24 subnet exhibits mixed abuse characteristics with 101 threat siblings. Recommended action is continued monitoring rather than blocking, with attention to DNSBL status changes and any service opening activity.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.