136.107.170.125📋 Copy

# IP Intelligence Briefing: 136.107.170.125/32

## Executive Summary

IP 136.107.170.125 is a Google Cloud infrastructure address with a moderate risk score of 50. The IP is classified as cloud compute infrastructure with no active open services and no observed threat indicators. While DNSBL listed on 2 of 8 feeds, the address represents legitimate Google Cloud hosting infrastructure.

## Ownership & Classification

• Organization: Google LLC (ASN 396982)
• Network: GOOGL-2, 136.107.0.0/16
• Infrastructure Type: CloudCompute (Google Cloud Platform)
• Network Role: Provider/Hosting
• Classification: Cloud infrastructure with firewalled/no services

## Geolocation

• Country: United States (US)
• Region: District of Columbia, Washington
• Coordinates: 38.91°N, -77.04°W
• Sources: MaxMind GeoLite2, Cymru (consensus confirmed)

## Threat Profile

• Risk Score: 50 (Moderate Risk)
• Abuse Confidence: Not assessed (cloud infrastructure)
• Blacklist Status: Listed on 2 of 8 DNSBL feeds
• Known Threat Indicators: None detected
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Campaign Associations: None identified

## Network Behavior

• Open Ports: None detected
• Active Services: No open services
• DNS Resolution: 125.170.107.136.bc.googleusercontent.com
• Reverse DNS: Valid PTR record to googleusercontent.com
• Route Stability: Route changes detected in last 30 days (isRouteStable: false)
• BGP Prefix: 136.107.128.0/17

## Neighborhood Analysis (136.107.170.0/24)

• Abuse Density: 0%
• Total Siblings: 3
• Threat Siblings: 0
• Neighbor Risk Distribution: 0 high, 0 medium, 3 low
• Neighbor IPs:

- 136.107.170.127 (Risk: 25, Authority: 90)

- 136.107.170.175 (Risk: 25, Authority: 90)

- 136.107.170.199 (Risk: 25, Authority: 90)

## Historical Observations

• Total Signals: 15 observations
• Recent Activity: Observed on 2026-08-13
• Threat Persistence: No persistent malicious activity detected
• Ownership Changes: None
• Geolocation Consistency: Generally stable with minor variance between geolocation providers

## Threat Assessment

This IP address represents standard Google Cloud Platform infrastructure. The moderate risk score (50) reflects typical cloud hosting classification rather than malicious activity. DNSBL listings appear to be false positives common for cloud infrastructure. No active threat indicators, campaigns, or malicious behaviors were observed.

## Recommended Actions

• Monitoring: Continue standard monitoring for cloud infrastructure
• Blocking: Not required - legitimate Google Cloud endpoint
• Allow Rules: No restrictions recommended for standard cloud traffic

Analysis Date: 2026-08-13

Classification: Cloud Infrastructure - Low Threat

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.