# IP Intelligence Briefing: 136.66.210.47/32
Date: 2026-08-12
Classification: Google Cloud Infrastructure
Risk Score: 25 (Low Risk)
Reporting: IPDebrief Intelligence
---
## Executive Summary
IP address 136.66.210.47 is classified as Low Risk with a risk score of 25. The address is owned by Google LLC (ASN 396982) and operates within Google Cloud infrastructure. The IP shows minimal threat indicators and is associated with Google's content delivery and user experience services.
---
## Technical Profile
Network Classification:
- Organization: Google LLC
- ASN: 396982 (GOOGL-2)
- CIDR Block: 136.64.0.0/11
- Infrastructure Type: Cloud Compute
- Connection Type: Firewalled / No Services
Geolocation:
- Country: United States
- Region: Oregon (OR)
- City: The Dalles
- Coordinates: 45.6°N, -121.18°W
- GeoValidation: GeoPlausible (ICMP validation unavailable due to ICMP blocking)
DNS Resolution:
- PTR Hostname: 47.210.66.136.bc.googleusercontent.com
- Forward Resolution: Confirmed
- Associated Domain: googleusercontent.com
- Email Auth: SPF and DMARC records present
---
## Threat Intelligence Assessment
Current Risk Indicators:
- Abuse Confidence: Not applicable (Google Cloud infrastructure)
- Known Campaigns: None detected
- Tor Exit: No
- Known Attacker: No
- Spam Source: No
- Blacklist Status: Listed on 1 of 8 DNS blacklists
Control Plane Data:
- Route Stability: Not stable
- DNSSEC Valid: Yes
- Has CAA: Yes
- Operator Score: 0.3478 (Basic)
- DNSBL Listed Count: 1
---
## Observation History
Monitoring Period: 23 observations recorded
Latest Activity: 2026-08-12
Key Historical Signals:
- Geolocation data consistently mapped to The Dalles, OR with 56% confidence
- Subnet abuse density observed at 0.5 (mostly_clean classification)
- Blacklist listings observed with high severity ratings
- Geo validation challenges persisted (ICMP blocked)
Threat Persistence: Zero days of persistent malicious activity observed. IP is not classified as persistently malicious.
---
## Neighborhood Analysis
Subnet: 136.66.210.47/24
Abuse Density: 0.5
Classification: Mostly Clean
Active Siblings: 1
Threat Siblings: 1
Neighbor Inventory:
- 136.66.210.112 (Risk Score: Not assessed)
---
## Relationship Graph
Associated Entities:
- DNS Associations: 47.210.66.136.bc.googleusercontent.com (repeated associations)
- Network Associations: GOOGL-2 (repeated network ownership)
Relationship Count: 21 total relationships recorded
- Primary pattern: DNS hostname associations to Google User Content domain
- Network ownership consistent across all relationships
---
## Recommended Actions
Risk Score: 25 (Low Risk)
Provider: Google Cloud
Security Recommendations:
- No specific firewall rules or security actions recommended based on current risk profile
- Monitor for any changes in threat indicators
- Standard Google Cloud infrastructure allows for normal business traffic
- Consider allowing traffic if it matches expected Google Cloud service patterns
Operational Context:
- IP operates within firewalled Google Cloud infrastructure
- No open ports detected
- No active services observed
- Standard Google Cloud content delivery behavior expected
---
## Conclusion
The IP address 136.66.210.47 presents a low-risk threat profile consistent with legitimate Google Cloud infrastructure. The address is associated with Google User Content services and shows no evidence of malicious activity. Standard monitoring and logging practices are recommended. No blocking or restrictive firewall rules are warranted at this time based on available intelligence.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 136.64.0.0/11 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 47.210.66.136.bc.googleusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 47.210.66.136.bc.googleusercontent.com |
π DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 31% | 2 | 4 |
| routing | 19% | 1 | 2 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 26% | 1 | 3 |
| geolocation | 27% | 2 | 2 |
| Overall | 25% | 10 | 16 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-07-24 20:33:33 UTC |
| Last Seen | 2026-08-12 18:52:52 UTC |
| Profile Built | 2026-08-12 19:14:47 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 31 |
Full dossier details are available via our API.