136.117.217.99📋 Copy

# IP Intelligence Briefing: 136.117.217.99/32

Classification: Low Risk (Risk Score: 25)

Last Updated: 2026-08-12

Status: Google Cloud Infrastructure

## Executive Summary

IP address 136.117.217.99 is a Google Cloud Compute instance located in the United States. The IP exhibits low-risk characteristics with no active threat indicators. However, geolocation validation anomalies and a single high-severity blacklist listing warrant monitoring.

## Ownership and Infrastructure

• Organization: Google LLC (ASN 396982)
• Network: GOOGL-46 (136.112.0.0/12)
• Infrastructure Type: Cloud Compute (Google Cloud Platform)
• Location: The Dalles, Oregon, US
• DNS Alias: 99.217.117.136.bc.googleusercontent.com

## Risk Assessment

Key Observations:

• No open ports detected; services show as "Firewalled / No Services"
• HTTP/2.0 enabled with 403 Forbidden response status
• TLS certificate: None
• DNSSEC valid; CAA records present

## Geolocation Validation

Anomaly Detected: RTT validation violation indicates reported geolocation may be inaccurate.

• Claimed distance: 8,032.6 km from probe location
• Minimum possible RTT for claimed distance: 160.65 ms
• Observed RTT: 82.0 ms (physically impossible)
• Geo validity flag: false
• Accuracy radius: 150 km

This suggests the IP may be routing through unexpected paths or the geolocation data is based on inference rather than direct measurement.

## Threat Indicators

• Blacklist Status: Listed on 1 of 8 threat feeds (max severity: high)
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Campaign Associations: None detected
• Control Plane: DNSBL listed on 1 list (of 8 total)

## Network Neighborhood

• Subnet: 136.117.217.0/24
• Abuse Density: 0 (clean)
• Sibling IPs: 0 detected
• Classification: Mostly clean

The /24 subnet shows no adjacent malicious activity, suggesting isolated occurrence.

## Historical Activity

• Total Observations: 24
• Recent Activity: 2026-08-12
• Threat Persistence: 0 days
• Ownership Changes: 0

The IP has maintained consistent ownership and no persistent malicious behavior detected over the observation period.

## Recommendations

1. Monitor Blacklist Status: The single high-severity blacklist listing requires investigation. Determine the list source and reason for listing.

2. Validate Geolocation: The RTT violation indicates the claimed US/OR location may not be accurate. Consider alternative attribution methods.

3. Low-Priority Monitoring: Given Google Cloud infrastructure and low risk score, no immediate blocking required. Implement standard cloud infrastructure monitoring.

4. No Firewall Rules Recommended: Risk score of 25 does not warrant default block or restrictive rules.

## Conclusion

IP 136.117.217.99 represents Google Cloud infrastructure with a low risk profile. The primary concern is the RTT geolocation validation anomaly and one high-severity blacklist listing. No immediate action required; maintain routine monitoring and investigate the blacklist listing if it impacts operational security posture.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.