142.251.211.165
Intelligence analysis of IP 142.251.211.165 identified the host as Google LLC infrastructure within the 142.250.0.0/15 CIDR block. The profile assigned a Low Risk reputation with a risk score of 25. Network classification defined the asset as CloudCompute infrastructure operating a Web Server, responding with a "gws" banner over HTTP/2.0 on ports 80 and 443. DNS resolution returned lclgaa-as-in-f5.1e100.net within the 1e100.net domain, with SPF and DMARC records present.
Threat indicators showed zero blacklist entries and no known campaign matches. However, the profile tagged the host as "Suspicious Host." Geolocation data placed the server in New York, US, yet physical validation flagged a contradiction between the claimed 7625km distance and a measured RTT of 16ms. The local subnet (142.251.211.0/24) exhibited a low abuse density of 0.0769 with three identified threat siblings.
Observations were recorded between 2026-09-15 and 2026-09-22. Recommendations indicated a Monitor action due to signal contradictions regarding geolocation and RTT physics.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Google LLC |
| ASN | AS15169 |
| Network Name | |
| CIDR Block | 142.250.0.0/15 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | lclgaa-as-in-f5.1e100.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | lclgaa-as-in-f5.1e100.net |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | 2/3 domains |
| DMARC | 2/3 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Present |
| Domains Checked | 3 domains |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | gws |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | invalid2.invalid |
| Valid From | 2026-08-10T09:42:20+00:00 |
| Valid Until | 2026-11-02T09:42:19+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 83 days |
| Serial Number | 6D68D40D8C521DCB61CE9EDFA7A69C64 |
| Thumbprint | 24457C193824715270B0CD97584E95F19A01432E |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 43% | 2 | 5 |
| routing | 13% | 1 | 1 |
| services | 33% | 2 | 4 |
| ownership | 27% | 2 | 3 |
| reputation | 28% | 1 | 3 |
| geolocation | 27% | 2 | 3 |
| Overall | 28% | 10 | 19 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-15 04:59:32 UTC |
| Last Seen | 2026-09-22 10:36:01 UTC |
| Profile Built | 2026-09-22 10:48:57 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 39 |
Full dossier details are available via our API.