136.114.191.115📋 Copy

INTEL BRIEFING: IP 136.114.191.115/32

Classification: Moderate Risk - Legitimate Infrastructure with Monitoring Advisory

---

**EXECUTIVE SUMMARY**

IP 136.114.191.115 resolves to Google LLC infrastructure (ASN 396982, netname GOOGL-46) within the 136.112.0.0/12 CIDR block. The IP presents a moderate risk profile (score: 50) with no active threat indicators. Network geolocation indicates US (Iowa, Council Bluffs region). This IP is currently classified as "clean" with zero abuse density in its /24 neighborhood.

---

**OWNERSHIP & INFRASTRUCTURE**

• Organization: Google LLC
• ASN: 396982 (GOOGL-46)
• CIDR Block: 136.112.0.0/12 (ARIN registry)
• Network Role: Provider (Google Cloud infrastructure)
• DNS Resolution: 115.191.114.136.bc.googleusercontent.com
• Reverse DNS: Confirmed forward/reverse resolution match

---

**THREAT INDICATORS**

• Risk Score: 50 (Moderate)
• Blacklist Count: 0
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Active Threat Indicators: None detected
• Campaign Correlation: None observed
• DNSBL Listings: 2 of 8 total lists (requires verification)

---

**NETWORK BEHAVIOR**

• Open Ports: None detected (Service classification: Firewalled/No Services)
• TLS Certificate: Not present
• HTTP Service: Not detected
• Anycast: No
• BGP Route Stability: Route flagged as unstable (routeChanges30d: 0, isRouteStable: false)
• RPKI State: Not verified
• GeoValidation: ICMP blocked - unable to validate; distance from probe: 7,218.7 km

---

**TEMPORAL ANALYSIS**

• Total Observations: 18 signals
• Ownership Changes: 0
• Threat Persistence Days: 0
• Persistently Malicious: False
• Last Observed: 2026-08-06
• Threat Observation Count: 0

---

**SUBNET CONTEXT (136.114.191.0/24)**

• Abuse Density: 0
• Classification: Clean
• Inherited Risk: 0
• Total Siblings: 1
• Active Siblings: 0
• Threat Siblings: 0

---

**RELATIONSHIP MAPPING**

• DNS Associations: 115.191.114.136.bc.googleusercontent.com (primary)
• Network Affiliation: GOOGL-46
• Related Entities: 6 total relationships (all DNS/network associations)

---

**RECOMMENDED ACTIONS**

Status: Monitor/Verify - No immediate blocking recommended

Rationale: This IP belongs to Google Cloud infrastructure with no active malicious indicators. The moderate risk score (50) reflects generic cloud infrastructure classification rather than specific threat activity.

If Blocking Is Required (High-Frisk Only):

```bash

# iptables

iptables -A INPUT -s 136.114.191.115 -j DROP

# nftables

nft add rule inet filter input ip saddr 136.114.191.115 drop

# Cloudflare WAF

ip.src eq 136.114.191.115 → Block

# AWS WAF

Addresses: ["136.114.191.115/32"]

```

Note: Blocking Google Cloud IPs should be done only after corroborating evidence of abuse.

---

**INTEL VALIDATION**

• DNSBL Listed: Yes (2 lists)
• GeoConsensus: True
• GeoPlausible: True
• Forward Resolution: Confirmed
• Email Auth: SPF/DMARC records present (not applicable for this IP context)

---

END BRIEFING

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.