136.67.120.213
Intelligence Briefing: 136.67.120.213
Identity and Ownership
The IP address was registered to Google LLC (ASN 396982) within the 136.64.0.0/11 block under ARIN. Geolocation data placed the infrastructure in The Dalles, Oregon, United States, with a consensus accuracy radius of 2500 km.
Reputation and Threat Status
The address maintained a Low Risk reputation score of 25. No malicious indicators, blacklist entries, or known campaign associations were identified. The system was not flagged as a Tor exit node, spam source, or known attacker.
Technical Profile
Network role classification identified Google Cloud compute infrastructure (CloudCompute). DNS reverse lookup returned 213.120.67.136.bc.googleusercontent.com. Port scanning revealed an open SSH service on TCP/22 running OpenSSH_8.9p1 Ubuntu-3ubuntu0.16. No HTTP or TLS services were detected.
Analysis and Recommendation
The target functioned as a single-service host. No evidence of malicious activity or compromise was found. No defensive action was recommended based on current observations.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 136.64.0.0/11 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 213.120.67.136.bc.googleusercontent.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | 213.120.67.136.bc.googleusercontent.com |
🔐 DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | 1/4 domains |
| DMARC | 1/4 domains |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
| Domains Checked | 4 domains |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | kuberneteskubernetes.defaultkubernetes.default.svckubernetes.default.svc.cluster.local |
| Valid From | 2026-08-24T12:01:56+00:00 |
| Valid Until | 2027-08-24T12:03:56+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 365 days |
| Serial Number | 00AF687D2D175B519E09AD78FBF8ACA776 |
| Thumbprint | 263D922B2F6364A54471C98502589935740B2197 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 2 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 25% | 1 | 2 |
| reputation | 25% | 1 | 1 |
| geolocation | 0% | 0 | 0 |
| Overall | 22% | 6 | 7 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-12 00:06:49 UTC |
| Last Seen | 2026-08-28 01:51:23 UTC |
| Profile Built | 2026-08-29 16:42:52 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 30 |
Full dossier details are available via our API.