162.216.149.149📋 Copy

# THREAT INTELLIGENCE BRIEFING

Target IP: 162.216.149.149/32

Classification: LOW RISK — Google Cloud Infrastructure

Generated: 2026-06-20

---

## EXECUTIVE SUMMARY

IP 162.216.149.149 is a low-risk (score: 25/100) Google Cloud Platform address located in Moncks Corner, South Carolina. The IP demonstrates typical cloud infrastructure characteristics with no exposed services, no open ports, and no active threat indicators. Historical analysis shows occasional DNSBL listings but no persistent malicious behavior. The subnet (162.216.149.0/24) exhibits moderate abuse density with 21 threat siblings out of 46 total neighbors, but the target IP itself shows no malicious activity.

---

## OWNERSHIP & GEOSPATIAL

Control Plane: Route stable (isRouteStable: true), BGP prefix 162.216.149.0/24, operator score 0.5652 (Moderate), DNSSEC valid.

---

## NETWORK ROLE & CLASSIFICATION

• Infrastructure Type: Google Cloud Platform
• Cloud Provider: Yes
• Service Purpose: Firewalled / No Services
• Open Ports: None detected
• TLS Certificates: None
• HTTP Services: None
• Is CDN/Tor/Proxy/Hosting: No

DNS Resolution: 149.149.216.162.bc.googleusercontent.com (forward confirmed)

---

## THREAT ANALYSIS

Historical Signals: 24 observations tracked. Notable DNSBL listing detected on 2026-06-15 (max severity: high), but no persistent malicious activity observed. Recent routing and ownership signals remain stable.

---

## NEIGHBORHOOD ASSESSMENT

Subnet: 162.216.149.0/24

• Total Siblings: 46
• Active Siblings: 28
• Threat Siblings: 21
• Abuse Density: 0.4565 (Moderate)
• Risk Classification: Mixed

Neighbor Risk Distribution:

• High Risk: 0
• Medium Risk: 19
• Low Risk: 34

Most neighbors show authority scores of 90, confirming Google Cloud infrastructure. No high-risk neighbors detected in immediate vicinity.

---

## RELATIONSHIP GRAPH

---

## RECOMMENDATIONS

Action: No blocking required. IP is legitimate Google Cloud infrastructure with no active threat indicators.

Firewall Policy: Allow standard Google Cloud egress/ingress patterns. No specific firewall rules recommended.

Monitoring: No enhanced monitoring required. Standard cloud provider traffic patterns expected.

IOC Status: No IOCs generated. No campaign correlations detected.

---

Analyst Notes: This IP represents normal Google Cloud Platform usage. The historical DNSBL listing from mid-June appears to be a transient event unrelated to the target IP's current activity. The subnet's moderate abuse density is consistent with mixed-use Google Cloud infrastructure. No defensive action required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.