142.250.217.226
Subject: IP 142.250.217.226/32
The IP address 142.250.217.226 was identified as a web server within Google LLC infrastructure (ASN 15169, CIDR 142.250.0.0/15). The asset maintained a low risk reputation score of 25. Technical analysis confirmed the host operated HTTP and HTTPS services on ports 80 and 443 with a server banner identifying it as "gws". DNS records resolved to pnlgaa-ay-in-f2.1e100.net with forward confirmation and valid SPF and DMARC configurations. TLS certificate inspection revealed a subject and issuer of "invalid2.invalid" due to No SNI provided.
Threat assessment flagged the host as a "Suspicious Host" with a moderate attribution confidence, though no specific known campaigns or active attacker indicators were present. A contradiction was recorded between claimed geolocation in New York and measured Round-Trip Time physics, which showed 23ms observed against a minimum possible 152.5ms. One DNS blacklist listing was observed against eight total lists.
Analysts were advised to monitor the asset due to signal contradictions and the suspicious classification. The asset was observed between 2026-09-01 and 2026-09-09. No immediate firewall rules were generated.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Google LLC |
| ASN | AS15169 |
| Network Name | |
| CIDR Block | 142.250.0.0/15 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | pnlgaa-ay-in-f2.1e100.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | mia07s62-in-f2.1e100.netpnlgaa-ay-in-f2.1e100.net |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | 3/6 domains |
| DMARC | 3/6 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Present |
| Domains Checked | 6 domains |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | gws |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | invalid2.invalid |
| Valid From | 2026-08-10T09:42:20+00:00 |
| Valid Until | 2026-11-02T09:42:19+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 83 days |
| Serial Number | 1433594D485C4CAD6C10CEEB446288DA |
| Thumbprint | 0B3FDEAF916EC8361E8D531E75C5D20BD9B51F6C |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 38% | 2 | 5 |
| ownership | 27% | 2 | 3 |
| reputation | 22% | 1 | 3 |
| geolocation | 33% | 2 | 5 |
| Overall | 27% | 10 | 21 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-01 17:55:45 UTC |
| Last Seen | 2026-09-26 16:04:27 UTC |
| Profile Built | 2026-09-26 16:15:55 UTC |
| Data Freshness | Live |
| Signal Types | 26 |
| Total Observations | 53 |
Full dossier details are available via our API.