136.85.57.170📋 Copy

INTELLIGENCE BRIEFING: IP 136.85.57.170

OVERVIEW

IP address 136.85.57.170 is a Google Cloud infrastructure host with a moderate risk profile (risk score: 40). The address belongs to Google LLC (ASN 396982) within the 136.64.0.0/11 block, with geolocation data indicating Singapore operations.

OWNERSHIP & INFRASTRUCTURE

• Organization: Google LLC
• ASN: 396982 (GOOGL-2)
• CIDR Block: 136.64.0.0/11
• Network Role: Single-Service Host (Google Cloud)
• Geolocation: Singapore (SG), with observed RTT metrics suggesting ~7,625 km distance from probe origin

THREAT INDICATORS

• Risk Score: 40 (Moderate Risk)
• DNSBL Listings: 2 out of 8 total lists
• Known Campaigns: None identified
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

ACTIVE SERVICES

• Port 22/TCP: SSH (OpenSSH_9.6p1 Ubuntu-3ubuntu13.18)
• DNS Resolution: 170.57.85.136.bc.googleusercontent.com
• Reverse DNS: Confirmed forward resolution

NEIGHBORHOOD ANALYSIS

The /24 subnet (136.85.57.170/24) is classified as clean with 0% abuse density. No threat siblings or active threats were detected in the immediate neighborhood.

OBSERVATION HISTORY

17 observations recorded. Most recent signal activity from August 2026 indicates stable ownership with Google LLC. Geolocation validation shows plausible location with minimum possible RTT of 152.5ms observed against claimed latitude/longitude.

RELATIONSHIPS

• Same network: GOOGL-2
• DNS associations: 170.57.85.136.bc.googleusercontent.com (duplicate entries)

RECOMMENDED ACTIONS

Given the moderate risk score (40) and DNSBL listings, the following firewall rules are recommended for consideration:

iptables: `iptables -A INPUT -s 136.85.57.170 -j DROP`

nftables: `nft add rule inet filter input ip saddr 136.85.57.170 drop`

nginx: `deny 136.85.57.170;`

pfSense: `136.85.57.170/32`

Cloudflare WAF: Block with expression `ip.src eq 136.85.57.170`

AWS WAF: Add address `136.85.57.170/32` with description "IPDebrief risk 40"

ANALYST NOTES

This IP is associated with legitimate Google Cloud infrastructure. The moderate risk score may warrant blocking based on specific threat context, but analysts should correlate with other indicators before implementing blocking rules, particularly given the clean neighborhood profile and legitimate ownership. The SSH service banner indicates standard Ubuntu-based OpenSSH configuration.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.