136.66.139.28📋 Copy

# IP Intelligence Briefing: 136.66.139.28

Classification: LEGITIMATE INFRASTRUCTURE

Risk Level: LOW (Score: 25/100)

Date: Intelligence compiled from multi-source analysis

---

## Executive Summary

IP address 136.66.139.28 is a Google Cloud infrastructure endpoint belonging to Google LLC (ASN 396982). The IP shows no malicious indicators and is classified as low-risk. All threat indicators are negative, with no association to known attack campaigns or abuse activity.

---

## Technical Profile

Ownership & Registration:

• Organization: Google LLC
• Network Name: GOOGL-2
• ASN: 396982
• CIDR Block: 136.64.0.0/11
• RIR: ARIN
• Abuse Contact: Available via RDAP

Geolocation:

• Country: United States (US)
• Region: Oregon (OR)
• City: The Dalles
• Coordinates: 45.6°N, -121.18°W
• Timezone: America/Los_Angeles

Network Classification:

• Role: Google Cloud provider
• Connection Type: Firewalled / No Services
• Services: None exposed (open ports: 0)

---

## DNS Analysis

Reverse DNS:

• PTR Record: 28.139.66.136.bc.googleusercontent.com
• Forward Confirmation: Valid
• Hosted Domain: googleusercontent.com

Email Authentication:

• SPF Record: Present
• DMARC Record: Present

DNS Security:

• DNSSEC: Valid
• CAA Records: Present

---

## Threat Assessment

Threat Indicators:

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0
• Known Campaigns: None

Abuse Metrics:

• Abuse Confidence Score: Not applicable (legitimate infrastructure)
• DNSBL Listings: 1 of 8 lists (likely false positive given overall profile)
• Campaign Likelihood: None

---

## Neighborhood Analysis (136.66.139.0/24)

• Subnet Classification: Clean
• Abuse Density: 0%
• Total Siblings: 1
• Active Siblings: 1
• Threat Siblings: 0

The /24 subnet shows no abuse activity. The single sibling IP is also benign.

---

## Relationship Graph

The IP primarily associates with:

• DNS: googleusercontent.com hostnames
• Network: GOOGL-2 (Google Cloud network)

All relationships confirm legitimate Google infrastructure associations.

---

## Observation History

Signal Timeline (Last 20 Observations):

• Most Recent: 2026-08-05
• Threat Persistence: 0 days
• Ownership Changes: 0
• Classification Consistency: Stable

Historical signals indicate consistent low-risk behavior with no escalation in threat posture over time.

---

## Recommended Actions

Security Posture: Monitor but no blocking required

• Risk score of 25 indicates low-risk infrastructure
• No firewall rules recommended
• No specific mitigation actions required

SOC Analyst Notes:

This IP represents legitimate Google Cloud infrastructure. The absence of open services is expected for cloud endpoint IPs. The single DNSBL listing appears to be a false positive given the otherwise clean profile. No blocking or monitoring action is recommended beyond standard logging.

---

Intelligence Source: IPDebrief Multi-Source Analysis

Confidence Level: High (Multiple validation sources confirm legitimacy)

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.