136.118.115.40

{ } JSON 🔧 Full Actions API

🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

## IP INTELLIGENCE BRIEFING: 136.118.115.40/32

Classification: Low Risk – Google Cloud Infrastructure

Report Date: 2026-08-06

Analysis Status: Complete

---

EXECUTIVE SUMMARY

IP 136.118.115.40 is a Google Cloud infrastructure endpoint with an overall risk score of 25 (Low Risk). The IP resolves to Google LLC (ASN 396982) within the GOOGL-46 network block and is geolocated to The Dalles, Oregon. The endpoint hosts SSH services and appears to be a legitimate cloud resource with standard security configurations.

---

OWNERSHIP & INFRASTRUCTURE

Organization: Google LLC
ASN: AS396982
Network: 136.112.0.0/12 (GOOGL-46)
Geolocation: The Dalles, Oregon, US (45.6°N, -121.18°W)
Network Role: Google Cloud infrastructure
DNS Resolution: 40.115.118.136.bc.googleusercontent.com (forward confirmed)

---

THREAT INDICATORS

Overall Risk Score: 25 (Low Risk)
Abuse Confidence Score: Not available
Blacklist Status: Listed on 1 of 8 DNSBLs
Known Malicious Activity: None detected
Tor Exit Node: No
Known Attacker: No
Spam Source: No

---

SERVICE FINGERPRINT

Open Ports: TCP/22 (SSH)
SSH Banner: SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.16
Email Authentication: SPF and DMARC records present
TLS Certificate: None detected
HTTP Service: None detected

---

NETWORK NEIGHBORHOOD

Subnet: 136.118.115.40/24
Abuse Density: 0 (no sibling threats)
Total Siblings: 1 (active)
Threat Siblings: 0
Network Classification: Clean

---

OBSERVATION HISTORY

Analysis of 20 recent observations reveals:

Network Classification: Consistently classified as "clean"
Threat Persistence: 0 days observed
Ownership Changes: 0 detected
Recent Proxy Check IO Scan: Reported risk score of 66 with proxy/VPN classification (transient assessment)
Geolocation Confidence: 56% confidence for The Dalles, OR location

---

RELATIONSHIPS

DNS Associations: 40.115.118.136.bc.googleusercontent.com (repeated associations)
Network Associations: GOOGL-46 (Same Network)
Total Relationships: 9 entities

---

SECURITY RECOMMENDATIONS

1. Allow Traffic: Standard Google Cloud infrastructure; no blocking recommended

2. SSH Monitoring: SSH service detected; monitor for unauthorized access attempts

3. DNSBL Review: Investigate listing on 1 DNSBL if blocking is in place; likely false positive for cloud infrastructure

4. Baseline: Establish baseline for normal traffic patterns from this Google Cloud endpoint

---

RISK ASSESSMENT

Current Risk Level: LOW

Recommended Action: Monitor but do not block

Threat Intelligence Confidence: High (multiple signal corroboration)

---

*Generated by IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

Country	🇺🇸 United States
Region	OR
City	The Dalles
Timezone	America/Los_Angeles
Latitude	45.60
Longitude	-121.18

🏢 Ownership & Registration

Organization	Google LLC
ASN	AS396982
Network Name	GOOGL-46
CIDR Block	136.112.0.0/12
RIR	ARIN
Country	United States
Abuse Contact	Available via RDAP

🌐 DNS Intelligence

PTR	40.115.118.136.bc.googleusercontent.com
Forward Confirmed	Yes — FCrDNS verified
Forward Hostnames	`40.115.118.136.bc.googleusercontent.com`

🔐 DNS Hygiene

Hygiene Score	100% (Excellent)
SPF	1/4 domains
DMARC	1/4 domains
FCrDNS	Verified
DNSSEC	Valid
CAA	Present
Domains Checked	4 domains

☁️ Network Classification

Infrastructure	Unknown
Service Purpose	Web Server
Network Tier	Tier 3 — Basic operator with some routing infrastructure

No specific classification

🔌 Services & Open Ports

Port	Service	Protocol	Banner
443	https	tcp	—
Closed Ports	22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned)

Server	—
HTTP Title	—

🔐 TLS Certificate

🔒

CN=35.197.11.240

Issued by CN=4d4a5be5-a6c1-4827-a20e-c9224d19ffab

Self-signed: No

SANs	kuberneteskubernetes.defaultkubernetes.default.svckubernetes.default.svc.cluster.local
Valid From	2026-08-12T06:10:58+00:00
Valid Until	2027-08-12T06:12:58+00:00
TLS Protocol	Tls13
Cipher Suite	TLS_AES_128_GCM_SHA256
Signature Algorithm	sha256RSA
Validity Period	365 days
Serial Number	464857FCB55BC4E23BD9B149EFB84E1F
Thumbprint	5CFF286EEBD1EF7CC1D3306AD76E008B04936C30

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

Dimension	Score	Sources	Observations
threat	35%	2	3
routing	17%	1	1
services	40%	2	3
ownership	35%	2	3
reputation	17%	1	2
geolocation	17%	1	1
Overall	27%	9	13

Coverage: 6/6 dimensions · Data sufficiency: sufficient

Data Coherence	Consistent (100%)
Attribution	Moderate (70%)
	OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

📅 Observation Timeline 🔄 Live

First Seen	2026-08-01 04:25:00 UTC
Last Seen	2026-08-13 02:17:59 UTC
Profile Built	2026-08-13 02:24:04 UTC
Data Freshness	Live
Signal Types	23
Total Observations	28

🔍 23 signal types · 28 observations collected

This report is generated from 23+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.

{ } JSON API 🔧 Actions API 📧 Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.

136.118.115.40📋 Copy