# IP Intelligence Briefing: 136.109.163.65/32
Classification: Low Risk / Legitimate Infrastructure
Date of Analysis: 2026-07-30
Data Sources: IPDebrief Intelligence Platform
---
## Executive Summary
IP address 136.109.163.65 is identified as legitimate Google Cloud infrastructure with an overall risk score of 0. The address resolves to googleusercontent.com and exhibits characteristics consistent with a web server deployment. No malicious indicators were detected across threat feeds, blacklist databases, or campaign correlation systems.
---
## Ownership and Attribution
| Attribute | Value |
|---|---|
| **Organization** | Google LLC |
| **ASN** | 396982 |
| **CIDR Block** | 136.107.0.0/16 |
| **Netname** | GOOGL-2 |
| **RIR** | ARIN |
| **Abuse Contact** | google-cloud-compliance@google.com |
| **Service Provider** | Google Cloud |
---
## Geolocation
| Attribute | Value |
|---|---|
| **Country** | United States (US) |
| **Region** | US-NY |
| **City** | New York |
| **Timezone** | America/New_York |
| **Geo Sources** | 2 |
| **Geo Consensus** | Yes |
*Note: Historical observations show occasional conflicting geolocation signals (The Dalles, OR) with 0.56 confidence, indicating potential multi-signature inference variance common with cloud infrastructure.*
---
## Threat Assessment
Risk Score: 0.0 (Low Risk)
Abuse Confidence Score: Not Available
Blacklist Count: 0
Tor Exit Node: No
Known Attacker: No
Spam Source: No
Known Campaigns: None detected
Threat Feeds: No matches
---
## Technical Profile
Network Role: Web Server
Infrastructure Type: Google Cloud Platform
DNS Classification: Forward confirmed (65.163.109.136.bc.googleusercontent.com)
Email Authentication: SPF and DMARC records present
Open Services:
- Port 443/TCP (HTTPS)
TLS Certificate:
- Issuer: CN=0bc81e01-2b7f-494a-a168-dda08d8407e8
- Subject: CN=136.109.136.215
- SANs: kubernetes, kubernetes.default, kubernetes.default.svc, kubernetes.default.svc.cluster.local
- Protocol: TLSv1.3 (TLS_AES_128_GCM_SHA256)
---
## Control Plane Analysis
| Attribute | Value |
|---|---|
| **BGP Prefix** | 136.109.128.0/17 |
| **Origin ASN** | 396982 |
| **RPKI State** | Not Available |
| **Route Stable** | No |
| **DNSSEC Valid** | Yes |
| **CAA Records** | Present |
| **DNSBL Listed** | No (0/8 lists) |
| **Operator Score** | 0.3478 (Basic) |
---
## Historical Observations (18 Signals)
Recent observation history (2026-07-30) indicates:
- Organization Resolution: High confidence (0.90-0.95) Google LLC attribution via RIR databases
- Connection Status: Occasional HTTPS connection failures observed (0.30 confidence)
- Geolocation: Mixed signals between New York, US and The Dalles, OR (0.56 confidence)
- TLS Scanning: Open port 443 with TLS 1.3 cipher suites confirmed
- No Persistent Threat Signals: Zero threat observation count
*Pattern Analysis:* The IP shows no evidence of becoming more or less risky over time. Ownership and threat persistence metrics remain at baseline.
---
## Network Relationships
DNS Associations:
- 65.163.109.136.bc.googleusercontent.com (multiple records)
Network Affiliations:
- GOOGL-2 (Same Network)
No cross-organizational or certificate-based relationships detected beyond Google infrastructure.
---
## Neighborhood Analysis (136.109.163.0/24)
| Metric | Value |
|---|---|
| **Total Siblings** | 0 |
| **Active Siblings** | 0 |
| **Threat Siblings** | 0 |
| **Abuse Density** | 0.0 |
| **Classification** | Not Available |
*Assessment: Subnet appears isolated with no neighboring IPs flagged for abuse or threat activity.*
---
## Recommended Security Actions
Current Risk Score: 0
Recommended Actions: None
Firewall Rules: Not Required
Assessment: This IP address operates within standard Google Cloud infrastructure parameters. No blocking or filtering actions are recommended based on current intelligence.
---
## Intelligence Conclusion
IP 136.109.163.65/32 is classified as legitimate Google Cloud infrastructure with no malicious indicators detected. The address exhibits normal operational characteristics for a web server deployment within Google's 136.107.0.0/16 address space. SOC teams may proceed with standard logging and monitoring practices without requiring special threat-based actions.
Threat Level: LOW
Action Required: None
Classification: Google Cloud Platform Infrastructure
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 136.107.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 65.163.109.136.bc.googleusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 65.163.109.136.bc.googleusercontent.com |
π DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | 1/4 domains |
| DMARC | 1/4 domains |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
| Domains Checked | 4 domains |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | β |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | kuberneteskubernetes.defaultkubernetes.default.svckubernetes.default.svc.cluster.local |
| Valid From | 2026-07-30T00:28:26+00:00 |
| Valid Until | 2027-07-30T00:30:26+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 365 days |
| Serial Number | 12C74D59184ED1F546ED15F16F3B90F4 |
| Thumbprint | D13CB3F7920789914295E24720B44B792283E27A |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 31% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 30% | 2 | 3 |
| ownership | 30% | 2 | 3 |
| reputation | 28% | 1 | 3 |
| geolocation | 27% | 2 | 2 |
| Overall | 26% | 10 | 16 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-07-24 20:33:33 UTC |
| Last Seen | 2026-08-12 18:52:22 UTC |
| Profile Built | 2026-08-12 19:04:51 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 29 |
Full dossier details are available via our API.