136.111.149.219📋 Copy

# IP Intelligence Briefing: 136.111.149.219

## Executive Summary

The IP address 136.111.149.219 presents a moderate risk profile (score: 50) and is associated with Google Cloud infrastructure. The address is currently listed on 2 of 8 DNS blacklist feeds and shows no active services. SOC monitoring recommended with defensive firewall rules.

## Technical Profile

Classification: Google Cloud Infrastructure

• ASN: 396982
• BGP Prefix: 136.111.0.0/16
• Location: Council Bluffs, Iowa, US
• DNS Resolution: 219.149.111.136.bc.googleusercontent.com
• Network Role: Firewalled / No Services
• Connection Type: N/A

Risk Indicators:

• Risk Score: 50 (Moderate)
• Operator Score: 0.3478 (Basic)
• DNSBL Listings: 2 of 8 total lists
• Route Stability: False (dynamic routing detected)
• Control Plane Operator Label: Basic

## Threat Observation History

Eleen signal observations recorded as of August 6, 2026. Key indicators include:

• Multiple DNS blacklist listings with high severity classifications
• Geographic consistency verified (Iowa coordinates)
• Provider classification stable as Google Cloud
• No evidence of Tor, VPN, or proxy usage

## Network Context

Subnet Analysis (136.111.149.0/24):

• Neighbor Count: 0
• Abuse Density: 0
• Risk Distribution: None in adjacent addresses
• Classification: Isolated address within subnet

Relationships:

• DNS associations to googleusercontent.com hostname
• No organizational or campaign-level correlations detected

## Recommended Security Actions

Based on the risk profile, the following defensive controls are recommended:

Firewall Rules:

• iptables: `iptables -A INPUT -s 136.111.149.219 -j DROP`
• nftables: `nft add rule inet filter input ip saddr 136.111.149.219 drop`
• Nginx: `deny 136.111.149.219;`

WAF/Cloud Protection:

• Cloudflare WAF: Block with expression `ip.src eq 136.111.149.219`
• AWS WAF: Add `136.111.149.219/32` to protection rules

Recommendation: Block traffic from this source. While the IP is associated with Google Cloud infrastructure, the blacklist presence and moderate risk score warrant defensive blocking. Monitor for any changes in behavior or risk profile.

---

*Analysis generated: [Current Date] | Source: IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.