136.66.183.204📋 Copy

# IP Intelligence Briefing: 136.66.183.204

Classification: Moderate Risk

Date: 2026-08-06

Prepared for: SOC Analyst Team

## Executive Summary

IP address 136.66.183.204 is a Google Cloud infrastructure endpoint located in The Dalles, Oregon, United States. The IP operates within the GOOGL-2 network block (136.64.0.0/11, ASN 396982) and presents a moderate risk score of 40. No active threat indicators were observed during the analysis period. The IP shows cloud-based infrastructure characteristics with no open services exposed.

## Technical Profile

Ownership & Network:

• Organization: Google LLC
• ASN: 396982 (GOOGL-2)
• CIDR Block: 136.64.0.0/11
• Network Classification: CloudCompute, Provider
• Infrastructure Type: Cloud infrastructure with hosting capabilities

Geolocation:

• Country: United States (US)
• State: Oregon (OR)
• City: The Dalles
• Coordinates: 45.6°N, -121.18°W
• Geo Validation: Plausible (distance from origin: 8,032.6 km)

DNS & Hostnames:

• PTR Record: 204.183.66.136.bc.googleusercontent.com
• Domain: googleusercontent.com
• Forward Resolution: Confirmed
• Email Authentication: SPF and DMARC records present

Control Plane Data:

• Route Stability: Unstable (isRouteStable: false)
• DNSBL Listings: 2 of 8 lists
• RPKI State: Not validated
• BGP Prefix: 136.66.0.0/15

## Threat Assessment

Risk Indicators:

• Overall Risk Score: 40 (Moderate)
• Abuse Confidence Score: Not available
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0

Threat Observations:

• No threat indicators detected in profile
• No known campaigns associated
• No correlated IPs identified
• Campaign likelihood: None

Service Exposure:

• Open Ports: None detected
• HTTP/HTTPS: No services accessible
• TLS Certificates: Not present
• Service Banners: None

## Observation History

Analysis of 19 observations collected through 2026-08-06:

• Geolocation Signals: Consistent with The Dalles, OR
• Traceroute Validation: ICMP blocked - unable to validate
• Operator Score: 0.3478 (Basic classification)
• Confidence Levels: Ranging from 0.30 to 0.60 across signals
• Threat Persistence: 0 days
• Ownership Changes: 0

Temporal analysis indicates stable infrastructure with no malicious persistence patterns observed.

## Network Relationships

Associated Entities (6 relationships):

• Same Network: GOOGL-2 (multiple entries)
• DNS Associations: 204.183.66.136.bc.googleusercontent.com (multiple entries)

Neighborhood Analysis:

• Subnet: 136.66.183.204/24
• Abuse Density: 0 (Clean)
• Total Siblings: 1
• Active Threat Siblings: 0
• Classification: Clean

No adjacent IPs in the /24 subnet show malicious activity.

## Recommended Security Actions

Based on the risk profile, the following firewall rules are recommended:

Firewall Rule Formats:

• iptables: `iptables -A INPUT -s 136.66.183.204 -j DROP`
• nftables: `nft add rule inet filter input ip saddr 136.66.183.204 drop`
• nginx: `deny 136.66.183.204;`
• pfSense: `136.66.183.204/32`
• Cloudflare WAF: Block IP with description "IPDebrief risk score 40"
• AWS WAF: Addresses 136.66.183.204/32

Operational Recommendation: While the IP is associated with Google Cloud infrastructure (legitimate provider), the presence of DNSBL listings and moderate risk score warrants consideration for blocking in high-security environments. However, blocking may impact legitimate Google Cloud services.

## Intelligence Assessment

This IP represents Google Cloud infrastructure with moderate risk characteristics. The lack of open services, clean neighborhood, and no active threat indicators suggests the IP is likely part of normal cloud infrastructure operations. However, the DNSBL listings indicate some reputation concerns, possibly from previous associations or automated scanning activity.

Threat Level: Moderate

Action Required: Evaluate based on organizational risk tolerance. Monitor for changes in DNSBL listings or new threat indicators.

---

*This briefing is based on IPDebrief intelligence data. Recommendations should be validated against organizational security policies.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.