INTELLIGENCE BRIEFING: 136.113.251.2/32
Classification: Google Cloud Infrastructure | Risk Level: Moderate (50/100)
Asset Ownership & Network Context
The target IP belongs to Google LLC (ASN 396982) within the GOOGL-46 network block (136.112.0.0/12). Geolocation data indicates Iowa, US (Council Bluffs region). DNS resolution confirms the IP resolves to googleusercontent.com infrastructure with PTR hostname 2.251.113.136.bc.googleusercontent.com.
Security Posture Assessment
- Services: No open ports detected; system is firewalled with no exposed services
- DNS Configuration: Forward resolution confirmed with valid SPF and DMARC records
- Control Plane: Route stability flagged; 2 DNSBL listings across 8 monitored lists
- Infrastructure Type: Google Cloud platform infrastructure
Threat Intelligence Summary
- Threat Indicators: None detected. IP is not flagged as known attacker, Tor exit node, proxy, or spam source
- Blacklist Status: No known blacklist entries
- Campaign Association: Zero correlations to active threat campaigns or certificate matches
- Network Reputation: Subnet 136.113.251.0/24 classified as clean with 0.0 abuse density
Temporal Analysis
Observation history shows 19 signal observations. Recent data confirms consistent Google LLC ownership with no ownership changes or persistent malicious activity patterns. Threat observation count remains at zero across the observation window.
Neighborhood Analysis
Subnet analysis reveals no adjacent IPs flagged as threats. All sibling IPs in the /24 range show clean classification with no inherited risk signals.
SOC Actionable Recommendations
- Allow Traffic: Legitimate Google Cloud infrastructure; no blocking required based on threat indicators
- Monitor DNSBL Listings: IP appears on 2 of 8 DNSBL feeds; verify whitelist status if previously blocked
- Baseline Comparison: Use this profile as baseline for Google Cloud traffic patterns
- No Firewall Actions Required: No recommended blocking rules generated; IP represents legitimate cloud infrastructure
Conclusion
The IP address represents legitimate Google Cloud infrastructure with moderate risk scoring primarily attributable to DNSBL presence rather than malicious activity. No defensive blocking actions recommended.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-46 |
| CIDR Block | 136.112.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 2.251.113.136.bc.googleusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 2.251.113.136.bc.googleusercontent.com |
π DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 24% | 2 | 2 |
| routing | 17% | 1 | 1 |
| services | 24% | 2 | 2 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 35% | 2 | 3 |
| Overall | 25% | 10 | 13 |
| Data Coherence | Consistent (100%) |
| Attribution | High (85%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-08-06 00:35:29 UTC |
| Last Seen | 2026-08-13 08:23:58 UTC |
| Profile Built | 2026-08-13 08:36:51 UTC |
| Data Freshness | Live |
| Signal Types | 26 |
| Total Observations | 27 |
Full dossier details are available via our API.