136.118.95.123📋 Copy

# IP Intelligence Briefing: 136.118.95.123/32

Classification: Moderate Risk | Provider: Google Cloud | Last Updated: 2026-08-13

## Executive Summary

IP 136.118.95.123 is registered to Google LLC (ASN 396982) within the GOOGL-46 netblock. The address resolves to Google Cloud infrastructure in The Dalles, Oregon, USA. Risk assessment indicates moderate threat potential (score: 50) with no active threat indicators, though the IP appears listed on 2 of 8 DNSBLs. No open services or ports were detected during recent scans.

## Risk Profile

## Network Context

• Geolocation: United States, Oregon, The Dalles (radius: 2,500km)
• CIDR Block: 136.112.0.0/12
• BGP Prefix: 136.118.0.0/17
• Neighborhood: 136.118.95.0/24 subnet classified as clean with 0% abuse density and no active threat siblings

## Threat Indicators

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Known Campaigns: None correlated
• Scans Detected: Yes (multiple recent probes)
• Services: None detected (firewalled/no services)

## Historical Observations

Eighteen signal observations recorded over the observation period. Geolocation signals consistently point to US infrastructure. Operator score of 0.3478 (Basic tier). No persistent malicious activity or threat persistence days recorded. Ownership has remained stable with zero changes.

## Relationship Analysis

DNS reverse resolution maps to `123.95.118.136.bc.googleusercontent.com`, confirming Google Cloud infrastructure association. No malicious entity relationships or certificate associations detected.

## Recommended Actions

Despite the moderate risk classification, the IP's association with Google Cloud infrastructure suggests legitimate traffic. However, the DNSBL listings warrant cautious handling:

## Analyst Notes

This IP represents Google Cloud infrastructure with moderate risk scoring driven primarily by DNSBL listings rather than active threat indicators. The clean neighborhood profile and lack of service exposure suggest the risk may stem from reputation-based factors rather than direct malicious activity. SOC teams should monitor for correlation with known threat campaigns while evaluating whether blocking aligns with organizational risk tolerance for cloud-based provider IPs.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.