108.62.62.145📋 Copy

# IP Intelligence Briefing: 108.62.62.145/32

Date: 2026-06-24

Classification: Moderate Risk (Score: 50)

Status: Active Monitoring

---

## Executive Summary

IP 108.62.62.145 is a LeaseWeb USA, Inc. Seattle infrastructure address with moderate risk posture. The IP is currently firewalled with no active services. Despite minimal direct threat indicators, the IP resides in a subnet exhibiting elevated abuse density, warranting continued monitoring.

---

## Ownership and Geolocation

• Organization: LeaseWeb USA, Inc. Seattle
• ASN: 396190
• Location: Seattle, Washington, United States
• BGP Prefix: 108.62.56.0/21
• Registration: ARIN

---

## Threat Assessment

Direct Threat Indicators: None detected. No active campaigns, no known malware signatures, no spam attribution.

---

## Network Behavior

• Service Status: Firewalled / No Services
• Open Ports: None detected
• DNS Resolution: None (no PTR records, no forward resolution)
• HTTP/HTTPS: No TLS certificates, no web services
• Route Stability: Unstable (route changes detected in last 30 days)
• Threat Persistence: 0 days (not persistently malicious)

---

## Subnet Context (108.62.62.0/24)

• Abuse Density: 0.5352 (High)
• Active Siblings: 130/256
• Threat Siblings: 137
• Risk Distribution: High (9), Medium (91), Low (0)

Neighboring High-Risk IPs: 108.62.62.0, 108.62.62.1, 108.62.62.2, 108.62.62.3, 108.62.62.4 (all Risk Score: 50)

---

## Historical Trend (Last 30 Days)

• Observations: 26
• Pattern: Consistent "Minimal" operator score (0.0-0.25)
• Risk Trajectory: Stable (no escalation)
• Recent Activity: 2026-06-24 (Most recent)

---

## Recommended Actions

1. Monitor incoming connections from subnet 108.62.62.0/24 due to high abuse density

2. Allow traffic to 108.62.62.145 (no direct threat indicators)

3. Alert on any service discovery or port scanning activity

4. Review connection patterns for potential lateral movement from high-risk neighbors

---

## SOC Notes

This IP represents a defensive infrastructure address with no active malicious indicators. However, the subnet environment shows significant abuse activity. Monitor for any behavioral changes or service activation. No immediate blocking recommended, but maintain visibility on traffic patterns.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.