136.117.5.206📋 Copy

# IP Intelligence Briefing: 136.117.5.206/32

Classification: Low Risk | Infrastructure: Google Cloud | Date: Current

## Executive Summary

IP address 136.117.5.206 is a Google Cloud Compute instance with a risk score of 25. The address is associated with the GOOGL-46 network block (136.112.0.0/12) and demonstrates no active threat indicators. The IP is classified as "mostly_clean" with minimal abuse density in its /24 subnet.

## Profile Details

## Threat Indicators

• Threat Indicators: None
• Known Attacker: False
• Tor Exit Node: False
• Spam Source: False
• Blacklist Count: 0
• DNSBL Listed: 1 of 8 lists
• Is Cloud: True
• Is Hosting: True
• Is CDN: False
• Is Proxy: False
• Is Residential: False

## Network Neighborhood Analysis

The /24 subnet (136.117.5.0/24) demonstrates low abuse activity:

• Abuse Density: 0
• Classification: mostly_clean
• Total Siblings: 2
• Active Siblings: 1
• Threat Siblings: 2
• Neighbor IP: 136.117.5.3 (Risk Score: 25, Authority Score: 90)

## Historical Observations

Analysis of 19 signal observations reveals stable characteristics:

• Most Recent Signal: 2026-06-16T08:45:38
• Classification Consistency: mostly_clean
• Inherited Risk: 5
• Abuse Density: 1
• Ownership Changes: 0
• Threat Persistence: 0 days
• Persistent Malicious Activity: False
• Geo Validation: ICMP blocked (unable to validate)

## Relationship Graph

The IP exhibits 16 relationships:

• Network Relationships: Multiple associations to GOOGL-46 network
• DNS Associations: Point to 206.5.117.136.bc.googleusercontent.com
• No Correlated Threat Entities: None identified

## Recommended Actions

Based on the risk profile and infrastructure characteristics:

1. Monitoring: Continue passive monitoring as part of Google Cloud traffic baseline

2. Firewall Rules: No specific blocking rules recommended; traffic permitted per organizational policy

3. WAF Configuration: No specific blocking rules required

4. Threat Intelligence: No correlation to known campaigns or attack patterns

## Assessment

This IP address represents legitimate Google Cloud infrastructure with no active threat indicators. The low risk score (25) and "mostly_clean" classification indicate normal operational traffic. The single DNSBL listing requires minimal concern given the cloud hosting context and lack of other threat indicators. No immediate action required; maintain standard monitoring procedures.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.