136.109.74.39📋 Copy

IP INTELLIGENCE BRIEFING: 136.109.74.39/32

EXECUTIVE SUMMARY

IP address 136.109.74.39 is registered to Google LLC (ASN 396982) within the GOOGL-2 CIDR block (136.107.0.0/16). The IP resolves to The Dalles, Oregon, USA and operates as Google Cloud infrastructure. Current risk assessment indicates moderate risk (50/100) with evidence of DNSBL listings requiring analyst review.

OWNERSHIP & INFRASTRUCTURE

• Organization: Google LLC
• ASN: 396982 (GOOGL-2)
• CIDR Block: 136.107.0.0/16
• Infrastructure Type: Cloud Compute (Google Cloud)
• Geolocation: The Dalles, Oregon, US (45.6°N, -121.19°W)
• DNS Resolution: 39.74.109.136.bc.googleusercontent.com (googleusercontent.com)
• PTR Record: 39.74.109.136.bc.googleusercontent.com

THREAT INDICATORS

• Risk Score: 50/100 (Moderate Risk)
• DNSBL Status: Listed on 2 of 8 threat feeds
• Known Campaigns: None identified
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Blacklist Count: 2

The moderate risk score combined with DNSBL listings indicates this IP has been flagged by threat intelligence feeds. However, the IP is confirmed as Google Cloud infrastructure, suggesting potential false positives or legitimate cloud service usage patterns.

NETWORK CLASSIFICATION

• Provider: Google Cloud
• Connection Type: Cloud
• Hosting: Enabled
• Services Detected: None (firewalled/no services)
• Open Ports: None
• TLS Certificate: None detected
• HTTP Services: None detected

CONTROL PLANE ANALYSIS

• BGP Prefix: 136.109.0.0/17
• Origin ASN: 396982
• Route Stability: Unstable (isRouteStable: false)
• RPKI Status: Not validated
• DNSSEC: Validated
• Operator Score: 0.3478 (Basic)

OBSERVATION HISTORY

Thirteen signals observed, with recent activity concentrated on 2026-08-06. Key observations include:

• Geolocation signals consistently placing IP in The Dalles, Oregon
• DNS associations to googleusercontent.com domain
• Multiple routing and reputation dimension signals
• No evidence of persistent malicious behavior or threat persistence

RELATIONSHIP ANALYSIS

Four relationships identified:

• DNS associations to hostnames (39.74.109.136.bc.googleusercontent.com)
• Same network relationships (GOOGL-2 network)
• No external organization or certificate associations

NEIGHBORHOOD ANALYSIS

Subnet 136.109.74.39/24 shows:

• Neighbor Count: 0
• Abuse Density: 0
• High/Medium Risk Neighbors: 0
• Active Threat Siblings: 0

The immediate /24 neighborhood appears clean with no correlated threat activity.

RECOMMENDED ACTIONS

Based on risk profile analysis, the following defensive measures are recommended:

Immediate Firewall Rules:

```bash

# iptables

iptables -A INPUT -s 136.109.74.39 -j DROP

# nftables

nft add rule inet filter input ip saddr 136.109.74.39 drop

# nginx

deny 136.109.74.39;

# pfSense

136.109.74.39/32

# Cloudflare WAF

Block 136.109.74.39 — IPDebrief risk score 50

# AWS WAF

Addresses: 136.109.74.39/32

Description: IPDebrief risk 50

```

ANALYST NOTES

• The IP is confirmed Google Cloud infrastructure, which may explain some threat feed false positives
• DNSBL listings (2 of 8 feeds) warrant investigation to determine if these are false positives or indicate actual misuse
• Route instability detected in control plane data; monitor for BGP anomalies
• No open ports or active services detected; IP appears to be in a non-service state or heavily firewalled
• Recommendation: Monitor for correlation with other known threats; consider whitelisting if this is legitimate Google Cloud traffic, or blocking if malicious activity is confirmed

RISK RATING: MODERATE (50/100)

PRIORITY: MEDIUM — Requires correlation with additional threat intelligence before definitive action

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.