136.64.97.83📋 Copy

# IP Intelligence Briefing: 136.64.97.83/32

## Executive Summary

The IP address 136.64.97.83 is a Google Cloud infrastructure endpoint with a moderate risk score (50/100). The address resolves to Google's cloud network (ASN 396982, GOOGL-2) and is geolocated to Council Bluffs, Iowa, United States. No open services were detected; the endpoint appears firewalled with no active listening ports.

## Infrastructure Profile

• ASN: 396982 (Google LLC)
• Organization: Google LLC (GOOGL-2)
• CIDR Block: 136.64.0.0/11
• Geolocation: US, Iowa, Council Bluffs
• Network Role: Google Cloud Provider
• Services: None detected (firewalled/no services)
• DNS Resolution: 83.97.64.136.bc.googleusercontent.com (forward confirmed)

## Threat Assessment

• Risk Score: 50 (Moderate Risk)
• Threat Indicators: None detected
• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Blacklist Count: 0
• Abuse Confidence: None recorded

DNSBL Status: Listed on 2 of 8 DNSBL lists (dnsblListedCount: 2, dnsblTotalLists: 8)

## Historical Signal Analysis

22 total observations recorded. Recent signals from 2026-08-13 show consistent infrastructure classification. The most recent subnet classification (136.64.97.83/24) was marked "clean" with 0 abuse density. No evidence of persistent malicious activity was observed across the observation window. Control plane data indicates route changes within the last 30 days, suggesting the address is not route-stable.

## Network Neighborhood

The /24 subnet (136.64.97.0/24) demonstrates a clean classification with:

• Abuse Density: 0
• Threat Siblings: 0
• Total Siblings: 1 (including the target IP)
• All neighbor IPs classified as clean

## Relationship Graph

The IP maintains DNS associations with the hostname 83.97.64.136.bc.googleusercontent.com and network-level relationships to GOOGL-2 (Google's cloud network). No third-party or external infrastructure relationships were identified.

## Recommended Security Actions

Despite the moderate risk score, no specific threat indicators triggered automated blocking recommendations. The following firewall rules are provided as probabilistic measures:

iptables:

```bash

iptables -A INPUT -s 136.64.97.83 -j DROP

```

nftables:

```bash

nft add rule inet filter input ip saddr 136.64.97.83 drop

```

Nginx:

```nginx

deny 136.64.97.83;

```

Cloudflare WAF: Block IP with expression `ip.src eq 136.64.97.83`

AWS WAF: Add IP to block list with description "IPDebrief risk 50"

## Analyst Notes

The IP represents legitimate Google Cloud infrastructure with a moderate risk classification. The DNSBL listings may indicate historical activity that no longer persists, or may be false positives given the infrastructure owner. No active threat indicators were observed. SOC analysts should monitor for any changes in the IP's classification but no immediate blocking is required unless additional correlation signals emerge.

Classification: Google Cloud Infrastructure / Moderate Risk

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.