136.117.102.247📋 Copy

# IP Intelligence Briefing: 136.117.102.247/32

## Executive Summary

136.117.102.247 is a Google Cloud infrastructure IP address (ASN 396982, Google LLC) classified as Low Risk (Risk Score: 25). The address is geolocated to The Dalles, Oregon, USA, but presents geolocation validation anomalies. No active services are detected, and the address is not associated with known malicious activity. Recommended action: Monitor but no immediate blocking required.

## Infrastructure Profile

• Organization: Google LLC (ASN 396982)
• Infrastructure Type: CloudCompute (Google Cloud)
• Network Classification: Cloud, Hosting, Firewalled
• DNS Resolution: 247.102.117.136.bc.googleusercontent.com (googleusercontent.com)
• Email Authentication: SPF and DMARC records present
• Control Plane: BGP prefix 136.117.0.0/17, origin ASN 396982

## Geolocation Analysis

• Claimed Location: The Dalles, Oregon, USA
• Coordinates: 45.6°N, 121.18°W
• Validation Status: ❌ GEOLOCATION IMPASSIBLE

Critical geolocation inconsistency detected: The IP is geolocated to The Dalles, OR (~8,033 km from observation point), but RTT measurements show 84ms, which is below the minimum possible 160.7ms for this distance. This indicates either routing anomalies, measurement errors, or spoofed geolocation data. Five probes were conducted with confidence scores ranging from 0.22 to 0.85.

## Threat Indicators

• Abuse Confidence: None reported
• Blacklist Status: 0 blacklists
• Tor Exit: No
• Known Attacker: No
• Spam Source: No
• Known Campaigns: None

## Network Behavior

• Open Ports: None detected
• TLS Certificate: Not detected
• HTTP Banner: Not detected
• Services: Firewalled / No services accessible
• Routing Status: Not route stable (isRouteStable: false)
• Route Changes: 0 in past 30 days

## Historical Observations (Last 20 Signals)

Recent observations from 2026-06-08 through 2026-06-15 indicate:

• Consistent geolocation attribution to The Dalles, OR
• DNS operator score: "Basic" (0.3478)
• One blacklist listing detected with "high" severity across 8 total DNSBL lists
• Average confidence: 0.56 (moderate)
• No persistent malicious behavior observed

## Subnet Neighborhood Analysis

• Subnet: 136.117.102.0/24
• Abuse Density: 0 (mostly_clean classification)
• Risk Distribution: 0 high-risk, 0 medium-risk, 0 low-risk sibling IPs
• Total Siblings: 1 (1 threat sibling)

The /24 subnet shows minimal abuse activity, suggesting the IP is not part of a larger malicious infrastructure cluster.

## Relationship Graph

• DNS Associations: 1 hostname (247.102.117.136.bc.googleusercontent.com)
• Network Relationships: Multiple connections to GOOGL-46 network
• Total Relationships: 41 detected

## Recommended Actions

No specific firewall rules or blocking recommendations generated. Risk profile indicates this is legitimate cloud infrastructure.

Monitoring Recommendations:

1. Monitor for service activation (open ports, TLS certificates)

2. Track geolocation consistency (current anomaly may resolve)

3. Watch for correlation with other Google Cloud IPs in the 136.117.0.0/17 prefix

4. Review blacklist listings if additional threat intelligence emerges

---

Intelligence Confidence: Moderate

Last Updated: 2026-06-15

Classification: Google Cloud Infrastructure (Low Risk)

Action Required: Monitor

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.