136.70.110.36📋 Copy

IP INTELLIGENCE BRIEFING: 136.70.110.36/32

Classification: Low Risk / Legitimate Infrastructure

Executive Summary

IP 136.70.110.36 is a Google Cloud infrastructure address with a risk score of 25 (Low Risk). The IP is classified as legitimate infrastructure hosting Google user content services. No malicious activity, threat indicators, or campaign associations have been identified.

Ownership & Network Context

• Organization: Google LLC (ASN 396982)
• Netname: GOOGL-2
• CIDR Block: 136.64.0.0/11
• Geolocation: Ashburn, VA, US (Google data center)
• Network Role: Google Cloud provider infrastructure
• Registration: RIR ARIN

Threat Assessment

• Risk Score: 25 (Low Risk)
• Blacklist Count: 0
• Threat Indicators: None detected
• Known Campaigns: None
• Abuse Confidence: Not applicable
• Control Plane: DNSBL listed on 1 of 8 lists (routine infrastructure listing)

Network Services

• Open Ports: None detected (firewalled/no services exposed)
• DNS Resolution: 36.110.70.136.bc.googleusercontent.com (forward confirmed)
• Email Authentication: SPF and DMARC records present
• Infrastructure Type: Cloud-hosted Google infrastructure

Historical Observation (20 signals)

• Subnet classification: Consistently "clean" with 0 abuse density
• Ownership: Stable with no changes recorded
• Threat persistence: None observed
• Recent scans: No open ports, no banners, no certificate matches
• Geo-validation: ICMP blocked (unable to validate), but geo-plausible confirmed

Neighborhood Analysis (136.70.110.0/24)

• Abuse Density: 0
• Classification: Clean
• Active Siblings: 1 (136.70.110.216)
• Threat Siblings: 0
• High/Medium Risk Neighbors: None

Relationship Graph

• Primary DNS associations: 36.110.70.136.bc.googleusercontent.com (repeated associations)
• Network associations: GOOGL-2 (Google Cloud network)

Recommended Actions

• No firewall rules recommended
• No blocking or mitigation required
• Treat as legitimate Google Cloud infrastructure

Assessment

This IP address represents standard Google Cloud infrastructure. The absence of open services, combined with clean neighborhood metrics and stable ownership history, indicates this is a legitimate hosting endpoint. No security action is recommended. SOC teams should treat incoming/outgoing traffic from this IP as legitimate unless other indicators suggest otherwise.

Intelligence Confidence: High (multiple corroborating signals from profile, history, and neighborhood analysis)

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.