142.251.167.132
The IP address 142.251.167.132 was identified as a Google LLC infrastructure endpoint (ASN 15169) within the 142.250.0.0/15 block. Ownership records confirmed registration under GOOGLE via ARIN. The endpoint functioned as a Web Server with TCP ports 80 and 443 open. Reverse DNS resolution returned ww-in-f132.1e100.net, confirming forward DNS alignment.
Threat intelligence assessment classified the address as Low Risk with a risk score of 20. No malicious indicators were detected, including zero blacklist hits, no known campaigns, and no attribution to known attacker groups. Behavioral analysis recorded zero honeypot hits or WAF violations. However, neighborhood analysis indicated a mixed classification for the /24 subnet, with three threat siblings observed among seven active neighbors.
Discrepancies were noted during validation. Geolocation data placed the asset in New York, yet Round-Trip Time (RTT) measurements (24ms) contradicted the minimum physics-based calculation (152.5ms) for that distance. Additionally, the TLS certificate presented a generic invalid issuer/subject string ("invalid2.invalid"), and DNSSEC validation failed. Overall confidence in the profile was labeled Very Low due to these signal contradictions. The recommended action was to Monitor the asset with low severity.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Google LLC |
| ASN | AS15169 |
| Network Name | |
| CIDR Block | 142.250.0.0/15 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ww-in-f132.1e100.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | ww-in-f132.1e100.net |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | 2/3 domains |
| DMARC | 2/3 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Present |
| Domains Checked | 3 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | gws |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | invalid2.invalid |
| Valid From | 2026-08-10T09:42:20+00:00 |
| Valid Until | 2026-11-02T09:42:19+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 83 days |
| Serial Number | 6D68D40D8C521DCB61CE9EDFA7A69C64 |
| Thumbprint | 24457C193824715270B0CD97584E95F19A01432E |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 27% | 2 | 3 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 19% | 2 | 2 |
| Overall | 21% | 10 | 14 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-14 22:23:23 UTC |
| Last Seen | 2026-09-22 17:53:24 UTC |
| Profile Built | 2026-09-22 18:05:24 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 31 |
Full dossier details are available via our API.