IP 142.251.153.6/32 was identified as a cloud compute web server within Google LLC infrastructure (ASN 15169, netname: GOOGLE). The asset holds a Low Risk reputation score of 25 with zero blacklist entries and no associated known campaigns. Operational analysis indicated the IP is classified as "Suspicious Host" despite a clean neighborhood classification for the 142.251.153.0/24 subnet.
Network services were observed on ports 80 (HTTP) and 443 (HTTPS) returning a 301 redirect status. The TLS certificate presented was invalid, displaying the subject "CN=invalid2.invalid." A signal contradiction was detected between claimed US geolocation and RTT physics measurements, which recorded a minimum possible RTT of 152.5ms for the stated distance compared to an observed 19ms. The control plane showed one route change within 30 days. Analysts recommended monitoring the asset due to present signal contradictions and insufficient data to classify specific intent.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Google LLC |
| ASN | AS15169 |
| Network Name | |
| CIDR Block | 142.250.0.0/15 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No β PTR hostname does not resolve back to this IP (weak signal) |
π DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | β |
| 443 | https | tcp | β |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | gws |
| HTTP Title | β |
π TLS Certificate
| SANs | invalid2.invalid |
| Valid From | 2026-08-10T09:42:20+00:00 |
| Valid Until | 2026-11-02T09:42:19+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 83 days |
| Serial Number | 0A0192130865F4876CD88E4C2FC591 |
| Thumbprint | AF3BC8F83CFF426D599E24002419EC614AC33EBF |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 4 |
| routing | 30% | 3 | 4 |
| services | 38% | 2 | 5 |
| ownership | 30% | 3 | 4 |
| reputation | 22% | 1 | 3 |
| geolocation | 38% | 2 | 5 |
| Overall | 31% | 13 | 25 |
| Data Coherence | Mostly Consistent (80%) β 1 contradiction(s) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-08-29 17:11:30 UTC |
| Last Seen | 2026-09-19 21:08:34 UTC |
| Profile Built | 2026-09-23 10:10:28 UTC |
| Data Freshness | Live |
| Signal Types | 26 |
| Total Observations | 36 |
Full dossier details are available via our API.