IPDebrief

108.62.62.221

IP Intelligence Dossier
Your IP: 216.73.216.123
{ } JSON πŸ”§ Full Actions API
πŸ€– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

# IPDEBRIEF INTELLIGENCE BRIEFING

Target IP: 108.62.62.221/32

Classification: Moderate Risk

Date: Current Intelligence Cycle

---

## EXECUTIVE SUMMARY

IP address 108.62.62.221 is a LeaseWeb USA infrastructure endpoint located in Seattle, Washington. The IP registers a moderate risk score of 50 with no active threat indicators. While the endpoint itself shows no known malicious activity, the /24 subnet exhibits elevated abuse density (9%), suggesting compromised or misconfigured peers in the neighborhood. No immediate blocking is required unless contextual threat intelligence indicates correlation.

---

## OWNERSHIP & GEOLOCATION

AttributeValue
**Organization**LeaseWeb USA, Inc. Seattle
**ASN**396190
**Country**United States (US)
**Region**Washington (WA)
**City**Seattle
**Coordinates**47.45, -122.31
**CIDR Block**108.62.56.0/21

The IP resolves to LeaseWeb infrastructure with PTR hostname `v19.ce02.sea-11.us.leaseweb.net`. Forward DNS confirmation is unavailable, and no reverse DNS records were observed beyond the PTR entry.

---

## THREAT ASSESSMENT

MetricValue
**Risk Score**50 (Moderate)
**Abuse Confidence**Not applicable (no active indicators)
**Known Campaigns**None
**Blacklist Count**0
**Tor Exit Node**No
**Known Attacker**No
**Spam Source**No

Threat Indicators: Empty. No known attack campaigns, spam sources, or blacklisting activity associated with this IP.

---

## NETWORK ROLE & SERVICES

AttributeValue
**Infrastructure Type**Provider
**Cloud/CDN/Proxy**No
**Open Ports**None detected
**Service Status**Firewalled / No Services
**TLS Certificate**Not observed

The endpoint is configured with no open services, indicating it is likely a network infrastructure or management endpoint rather than a public-facing host.

---

## SUBNET NEIGHBORHOOD ANALYSIS

MetricValue
**Subnet**108.62.62.0/24
**Abuse Density**0.09 (9%)
**High-Risk Neighbors**9
**Medium-Risk Neighbors**91
**Total Analyzed**100

The /24 subnet shows elevated abuse density with 9% of peers classified as high-risk. While 108.62.62.221 itself shows no malicious activity, analysts should monitor for correlation with known compromised IPs in the same subnet.

---

## OBSERVATION HISTORY

The IP has generated 24 observations since tracking began. Recent signals (June 2026) indicate:

The IP demonstrates persistence without escalation of threat indicators.

---

## RELATIONSHIP GRAPH

169 relationships identified, predominantly "Same Network" associations pointing to 108-62-56-0 network. No external organization or certificate relationships detected.

---

## RECOMMENDED ACTIONS

PlatformAction
**iptables**`iptables -A INPUT -s 108.62.62.221 -j DROP`
**nftables**`nft add rule inet filter input ip saddr 108.62.62.221 drop`
**nginx**`deny 108.62.62.221;`
**pfSense**Block 108.62.62.221/32
**Cloudflare WAF**Block with expression `ip.src eq 108.62.62.221`
**AWS WAF**Add address 108.62.62.221/32 to rule set

Note: These recommendations are probabilistic and should be combined with other signals before taking action. No active threat indicators require immediate blocking.

---

## INTELLIGENCE CONCLUSION

108.62.62.221 is a LeaseWeb infrastructure endpoint with moderate risk classification and no active threat indicators. The IP is not associated with known campaigns, spam sources, or malicious activity. However, the elevated abuse density in the /24 subnet warrants continued monitoring. Recommend standard baseline monitoring without immediate blocking unless additional contextual indicators emerge.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

CountryπŸ‡ΊπŸ‡Έ United States
RegionWA
CitySeattle
TimezoneAmerica/Los_Angeles
Latitude47.45
Longitude-122.31

🏒 Ownership & Registration

OrganizationLeaseWeb USA, Inc. Seattle
ASNAS396190
Network Nameβ€”
CIDR Blockβ€”
RIRARIN
Countryβ€”
Abuse ContactAvailable via RDAP

🌐 DNS Intelligence

PTRv19.ce02.sea-11.us.leaseweb.net
Forward ConfirmedNo β€” PTR hostname does not resolve back to this IP (weak signal)
Forward Hostnamesv19.ce02.sea-11.us.leaseweb.net

πŸ” DNS Hygiene

Hygiene Score40% (Fair)
SPFNot configured
DMARCNot configured
FCrDNSNot verified
DNSSECValid
CAAPresent

☁️ Network Classification

InfrastructureUnknown
Service PurposeFirewalled / No Services
Network TierUnknown β€” Insufficient routing data to classify
No specific classification

πŸ”Œ Services & Open Ports

PortServiceProtocolBanner
No open ports detected
Closed Ports22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned)
Serverβ€”
HTTP Titleβ€”

πŸ” TLS Certificate

πŸ”’
No certificate
Issued by β€”
N/A
SANsNone
Valid Fromβ€”
Valid Untilβ€”

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
28%
23
routing
13%
11
services
28%
23
ownership
20%
23
reputation
26%
13
geolocation
31%
23
Overall24%1016
Coverage: 6/6 dimensions Β· Data sufficiency: sufficient
Data CoherenceMostly Consistent (80%) β€” 1 contradiction(s)
AttributionLow (35%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid
⚠ Claimed geolocation contradicts RTT physics measurement

πŸ“… Observation Timeline πŸ”„ Live

First Seen2026-05-07 23:05:00 UTC
Last Seen2026-06-26 18:11:59 UTC
Profile Built2026-06-26 23:02:47 UTC
Data FreshnessLive
Signal Types21
Total Observations25
πŸ” 21 signal types Β· 25 observations collected
This report is generated from 21+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API πŸ”§ Actions API πŸ“§ Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata β€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.