# IP Intelligence Briefing: 136.66.42.6/32
Date: August 13, 2026
Classification: Moderate Risk / Google Infrastructure
Risk Score: 65/100
---
## Executive Summary
IP 136.66.42.6 is registered to Google LLC (ASN 396982) within the 136.64.0.0/11 cloud infrastructure block. Geolocation data consistently identifies the IP in The Dalles, Oregon, US. While the IP resolves to a valid Google-hosted domain (6.42.66.136.bc.googleusercontent.com), the moderate risk score (65) stems primarily from DNSBL listings (3 of 8 total lists). No direct threat indicators, known campaigns, or persistent malicious activity have been observed.
---
## Ownership & Infrastructure
| Field | Value |
|---|---|
| Organization | Google LLC |
| ASN | 396982 |
| Netname | GOOGL-2 |
| RIR | ARIN |
| CIDR Block | 136.64.0.0/11 |
| Infrastructure Type | Google Cloud Provider |
The IP belongs to Google's operational cloud infrastructure. DNS resolution confirms the address maps to `6.42.66.136.bc.googleusercontent.com` with forward confirmation. TLS and HTTP services are not actively open on the IP.
---
## Threat Indicators
| Indicator | Status |
|---|---|
| Known Attacker | No |
| Spam Source | No |
| Tor Exit Node | No |
| Blacklist Count | 0 |
| Campaign Likelihood | None detected |
| DNSBL Listed | Yes (3 of 8 lists) |
No threat feed matches, known campaigns, or abuse indicators were found. The elevated risk score is derived from control plane anomalies rather than confirmed malicious activity.
---
## Neighborhood Analysis
Subnet: 136.66.42.6/24
- Abuse Density: 0%
- Total Siblings: 2
- Active Siblings: 1
- Threat Siblings: 0
- Neighbor Risk (136.66.42.150): 0/100
The /24 subnet exhibits minimal abuse activity. The single sibling IP (136.66.42.150) shows no risk and maintains high authority (90/100).
---
## Historical Observation
A total of 17 observations were recorded. Geolocation signals consistently placed the IP in US/US/US (The Dalles, Oregon) with confidence levels ranging 0.35β0.70. No ownership changes or persistent malicious patterns were detected during the observation window.
---
## Recommended Actions
Priority: Monitor / Block (Context-Dependent)
| Platform | Action |
|---|---|
| iptables | `iptables -A INPUT -s 136.66.42.6 -j DROP` |
| nftables | `nft add rule inet filter input ip saddr 136.66.42.6 drop` |
| nginx | `deny 136.66.42.6;` |
| pfSense | Block 136.66.42.6/32 |
| Cloudflare WAF | Block rule: `ip.src eq 136.66.42.6` |
| AWS WAF | Block address: `136.66.42.6/32` |
Recommendation: Increase logging verbosity and review recent inbound activity from this IP. While the risk score warrants defensive measures, the IP's association with Google infrastructure requires contextual assessment. Consider allowing traffic if the source is a trusted Google service, or blocking if the IP is observed in unauthorized access attempts.
---
Intelligence Product: IPDebrief
Data Confidence: Moderate
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 136.64.0.0/11 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 6.42.66.136.bc.googleusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 6.42.66.136.bc.googleusercontent.com |
π DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Single-Service Host |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 30% | 2 | 3 |
| routing | 17% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 30% | 2 | 3 |
| Overall | 23% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-08-12 00:06:49 UTC |
| Last Seen | 2026-08-30 14:48:19 UTC |
| Profile Built | 2026-08-30 14:57:52 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 33 |
Full dossier details are available via our API.