136.67.27.99📋 Copy

# IP Intelligence Briefing: 136.67.27.99/32

Classification: Low Risk — Google Cloud Infrastructure

Date: 2026-08-12

Analyst: IPDebrief Intelligence Team

## Executive Summary

IP 136.67.27.99 operates as a low-risk Google Cloud infrastructure endpoint located in The Dalles, Oregon, US. The IP is associated with ASN 396982 (GOOGL-2) and resolves to the googleusercontent.com domain. Current threat assessment indicates minimal malicious activity, with a risk score of 25 out of 100.

## Network Profile

## Threat Indicators

• Known Malicious Activity: None detected
• Tor Exit Node: No
• Spam Source: No
• Known Attacker: No
• Blacklist Count: 0
• Threat Feeds: None
• DNSBL Listed: 1 out of 8 total lists (observed on 2026-08-05)

## Historical Observation

The IP accumulated 23 historical observations. A notable signal occurred on 2026-08-05 showing DNSBL listings with maximum severity rated "high" across 1 of 8 lists. The subnet abuse density was recorded at 0.5 with a "mostly_clean" classification. No persistent malicious behavior was identified over the observation period.

## DNS and Service Analysis

• PTR Record: 99.27.67.136.bc.googleusercontent.com
• Forward Resolution: Confirmed
• Domain: googleusercontent.com
• Open Ports: None detected
• TLS Certificate: Not available
• HTTP Services: None detected

## Network Relationships

The IP maintains 28 relationship entries, predominantly:

• Same network relationships to GOOGL-2 (13 instances)
• DNS associations with 99.27.67.136.bc.googleusercontent.com (15 instances)

## Neighborhood Analysis (136.67.27.0/24)

• Abuse Density: 0%
• Active Siblings: 1
• Threat Siblings: 1 (IP 136.67.27.190, risk score 25)
• Classification: mostly_clean

## Recommended Actions

Based on the low-risk profile and Google Cloud infrastructure classification:

1. Permit traffic from this IP for legitimate business operations

2. Monitor DNSBL listings for any changes in reputation

3. No firewall rules required for blocking

4. Correlate with googleusercontent.com for broader cloud infrastructure analysis

## Conclusion

IP 136.67.27.99 represents a legitimate Google Cloud compute endpoint with no current indicators of malicious use. The single historical DNSBL listing appears isolated. SOC teams may allow traffic from this IP without restriction while maintaining standard monitoring protocols for cloud infrastructure.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.