142.251.41.161
Intelligence Briefing: 142.251.41.161/32
Ownership and Infrastructure
The address was identified as infrastructure associated with Google LLC (ASN 15169). Network role classification indicated CloudCompute hosting infrastructure.
Reputation and Risk Assessment
The IP maintained a risk score of 20 (Low Risk). No blacklist entries, known campaigns, or active attacker indicators were observed. Behavioral analysis recorded zero incidents regarding honeypot hits or WAF violations.
Technical Observations
Services observed included HTTP and HTTPS on standard ports. HTTP responses returned a status code of 301. HTTPS connections utilized a self-signed certificate (CN=invalid2.invalid). DNS hygiene was rated excellent with valid SPF, DMARC, and CAA records.
Geolocation and Routing
Geolocation data pointed to New York, US, but this was contradicted by RTT physics measurements (17ms observed vs 152.5ms minimum required for the claimed distance). Route stability was flagged as false with no valid RPKI or IRR consistency.
Threat Intelligence
No malicious intent was classified. The neighborhood classification remained "mostly clean" with low abuse density.
Recommendation
SOC analysts were advised to monitor the address due to signal contradictions between geolocation and RTT data. No immediate firewall rules were required.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Google LLC |
| ASN | AS15169 |
| Network Name | |
| CIDR Block | 142.250.0.0/15 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | lclgaa-at-in-f1.1e100.net |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | lclgaa-at-in-f1.1e100.net |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | gws |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | invalid2.invalid |
| Valid From | 2026-09-04T09:09:26+00:00 |
| Valid Until | 2026-11-27T09:09:25+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 83 days |
| Serial Number | 1433594D485C4CAD6C10CEEB446288DA |
| Thumbprint | 0B3FDEAF916EC8361E8D531E75C5D20BD9B51F6C |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 38% | 2 | 4 |
| routing | 17% | 1 | 1 |
| services | 49% | 2 | 5 |
| ownership | 35% | 2 | 3 |
| reputation | 32% | 1 | 3 |
| geolocation | 35% | 2 | 3 |
| Overall | 34% | 10 | 19 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-20 18:59:21 UTC |
| Last Seen | 2026-09-27 18:01:04 UTC |
| Profile Built | 2026-09-27 19:01:59 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 32 |
Full dossier details are available via our API.