108.62.59.113📋 Copy

# IP Intelligence Briefing: 108.62.59.113/32

## Executive Summary

The target IP address 108.62.59.113 is a LeaseWeb USA infrastructure endpoint located in Seattle, WA, classified as Moderate Risk (Risk Score: 50). The IP exhibits no currently open services and is in a state of firewalled inactivity. However, neighborhood analysis reveals concerning patterns of high-density abuse activity across the /24 subnet.

---

## Network Ownership & Geolocation

• ASN: 396190 (LeaseWeb USA, Inc. Seattle)
• Organization: LeaseWeb USA, Inc. Seattle
• Geolocation: United States, Washington (Seattle)
• CIDR Block: 108.62.56.0/21
• RIR: ARIN
• DNSSEC: Valid
• CNAME/CAA Records: Present

---

## Risk Assessment

• Overall Risk Score: 50 (Moderate Risk)
• Abuse Confidence: Not explicitly scored in current profile
• Classification: Firewalled / No Services
• DNSBL Listings: 2 of 8 total lists
• Control Plane Operator Score: 0.2174 (Minimal)
• Route Stability: False (unstable routing)

---

## Threat Intelligence Indicators

• Known Attacker: Not flagged
• Spam Source: Not flagged
• Tor Exit Node: False
• VP/Proxy/CDN: Not detected
• Campaign Correlation: None identified
• Cert Matches: 0
• Pulse Names: 50 threat feed references (details omitted)

---

## Neighborhood Analysis (108.62.59.0/24)

The target IP resides within a /24 subnet exhibiting high abuse density:

• Abuse Density: 0.5391 (53.91% of IPs flagged as abusive)
• Total Siblings: 256
• Active Siblings: 71
• Threat Siblings: 138
• Inherited Risk Score: 21
• Risk Distribution: All sampled neighbors (100 IPs) show medium risk (Score: 50)

The subnet demonstrates systemic abuse patterns, with approximately half of all addresses exhibiting risk indicators.

---

## Historical Timeline (22 Observations)

Recent observations indicate ongoing threat activity:

• June 24, 2026 (08:32 UTC): Multiple threat signals detected with 95% confidence; 50+ pulse references including unidentified threat feeds
• June 24, 2026 (08:32 UTC): Geolocation confirmation (US) with 35% confidence
• May 31, 2026: Network classification confirmed (non-residential, non-cloud, non-VPN)

---

## Relationship Graph

• Total Relationships: 124
• Primary Association: Same network (108-62-56-0) with 119+ duplicate entries indicating extensive subnet relationships
• No external hostname or organization associations detected

---

## Recommended Actions

Based on risk profile, the following defensive measures are recommended:

Note: These recommendations are probabilistic and should be combined with additional threat signals before deployment.

---

## Operational Notes

• The IP shows no active services or open ports
• Forward resolution count: 0 (no reverse DNS entries)
• Email authentication: SPF/DMARC not configured (no hosted domains)
• Geo validation: ICMP blocked - unable to validate directly

---

Classification: Moderate Risk / Neighborhood Concern

Priority: Medium (due to high-abuse subnet context)

Last Updated: Intelligence compiled from current profile, history, and relationship data

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.