142.251.211.91
Intelligence Briefing: IP 142.251.211.91/32
The IP address 142.251.211.91/32 was identified as infrastructure belonging to Google LLC under ASN 15169. Reputation assessments classified the endpoint as Low Risk with a Risk Score of 20. Network role identification confirmed CloudCompute and Hosting services, with active services detected on ports 80 (HTTP) and 443 (HTTPS). DNS resolution returned pnlgaa-av-in-f27.1e100.net, and the domain 1e100.net was configured with SPF and DMARC records. TLS inspection revealed a certificate subject of "invalid2.invalid" with a server banner indicating "No SNI provided."
Analysis of geolocation data assigned the endpoint to New York, US, but control plane metrics flagged a contradiction where an average RTT of 21.4ms conflicted with the claimed distance of 7625.7km. Neighborhood analysis for subnet 142.251.211.0/24 classified the environment as mostly_clean with an abuse density of 0.0714 and 2 threat siblings. No known campaigns, blacklists, or malicious threat indicators were associated with the address. Due to signal contradictions present, the recommended action was Monitor with low severity.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Google LLC |
| ASN | AS15169 |
| Network Name | |
| CIDR Block | 142.250.0.0/15 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | pnlgaa-av-in-f27.1e100.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | pnlgaa-av-in-f27.1e100.net |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | 3/6 domains |
| DMARC | 3/6 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Present |
| Domains Checked | 6 domains |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | UploadServer |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | invalid2.invalid |
| Valid From | 2026-08-10T09:42:20+00:00 |
| Valid Until | 2026-11-02T09:42:19+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 83 days |
| Serial Number | 0A0192130865F4876CD88E4C2FC591 |
| Thumbprint | AF3BC8F83CFF426D599E24002419EC614AC33EBF |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 36% | 2 | 7 |
| routing | 13% | 1 | 1 |
| services | 33% | 2 | 5 |
| ownership | 27% | 2 | 4 |
| reputation | 27% | 1 | 5 |
| geolocation | 27% | 2 | 4 |
| Overall | 27% | 10 | 26 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-03 17:10:08 UTC |
| Last Seen | 2026-09-28 05:31:55 UTC |
| Profile Built | 2026-09-28 05:45:15 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 49 |
Full dossier details are available via our API.