Intellect Briefing: 142.251.45.187/32
Ownership and Infrastructure
The target IP 142.251.45.187 is owned by Google LLC (ASN 15169) within the 142.250.0.0/15 CIDR block. The system was identified as Cloud Compute infrastructure designated for Web Server purposes.
Technical Profile
Active services were observed on ports 80 (HTTP) and 443 (HTTPS). Server banner analysis returned "UploadServer," and the TLS certificate subject was identified as "CN=invalid2.invalid," suggesting potential internal or misconfigured certificate usage. DNS hygiene was rated excellent with SPF and DMARC validation active, though the IP appeared on one of eight DNSBL lists. Control plane analysis noted route instability over the previous 30 days.
Threat Assessment
The overall risk score was recorded as 25, labeled "Low Risk." However, behavioral classification tagged the host as "Suspicious Host." A contradiction was detected between claimed New York geolocation and RTT physics measurements. No known malicious campaigns or attacker indicators were explicitly linked to this address.
Recommendation
Analysts were advised to monitor the asset for changes due to signal contradictions. The severity of the observation was rated low, and no immediate firewall rules were generated.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Google LLC |
| ASN | AS15169 |
| Network Name | |
| CIDR Block | 142.250.0.0/15 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | pnlgaa-ar-in-f27.1e100.net |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | pnlgaa-ar-in-f27.1e100.net |
π DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | 2/4 domains |
| DMARC | 2/4 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Present |
| Domains Checked | 4 domains |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting β Infrastructure provider without advanced routing |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | β |
| 443 | https | tcp | β |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | UploadServer |
| HTTP Title | β |
π TLS Certificate
| SANs | invalid2.invalid |
| Valid From | 2026-08-10T09:42:20+00:00 |
| Valid Until | 2026-11-02T09:42:19+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 83 days |
| Serial Number | 1433594D485C4CAD6C10CEEB446288DA |
| Thumbprint | 0B3FDEAF916EC8361E8D531E75C5D20BD9B51F6C |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 37% | 2 | 6 |
| routing | 27% | 2 | 3 |
| services | 27% | 2 | 4 |
| ownership | 35% | 3 | 5 |
| reputation | 27% | 1 | 5 |
| geolocation | 27% | 2 | 4 |
| Overall | 30% | 12 | 27 |
| Data Coherence | Mostly Consistent (80%) β 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-09-07 03:47:05 UTC |
| Last Seen | 2026-09-25 21:45:37 UTC |
| Profile Built | 2026-09-25 21:56:55 UTC |
| Data Freshness | Live |
| Signal Types | 30 |
| Total Observations | 51 |
Full dossier details are available via our API.