162.216.149.83📋 Copy

# IP Intelligence Briefing: 162.216.149.83/32

Classification: Low Risk

Date: Current Analysis

Platform: IPDebrief

---

## Executive Summary

IP 162.216.149.83 is a Google Cloud infrastructure address with a low-risk profile (risk score: 25). The IP belongs to Google LLC (ASN 396982) and operates within the 162.216.149.0/24 subnet. No active threat indicators or malicious campaigns were identified. The subnet shows mixed classification with moderate abuse density (0.4773).

---

## Technical Profile

Ownership & Infrastructure:

• Organization: Google LLC
• ASN: 396982 (GOOGLE-CLOUD-PLATFORM)
• Network Role: Google Cloud Provider, Cloud Compute Infrastructure
• CIDR Block: 162.216.149.0/24

Geolocation:

• Country: United States (US)
• Region: South Carolina
• City: Moncks Corner (33.21°N, -80.17°W)
• Note: Geolocation validation flagged as implausible; RTT measurements (34ms) conflict with stated distance (6,958km). Minimum possible RTT for this distance should be ~139ms.

DNS Resolution:

• PTR Hostname: 83.149.216.162.bc.googleusercontent.com
• Forward Resolution: Confirmed (1 hostname)
• Domain: googleusercontent.com
• Email Auth: SPF and DMARC records present

---

## Threat Assessment

Threat Indicators:

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0
• Known Campaigns: None
• Threat Feeds: No active indicators

Risk Metrics:

• Overall Risk Score: 25 (Low Risk)
• Abuse Confidence Score: Not applicable
• Provider Score: 0
• Authority Score: 0

Control Plane:

• Route Stability: Stable (no changes in 30 days)
• BGP Path: 57866 15169 396982
• DNSSEC: Valid
• DNSBL Listed: 1 of 8 total lists

---

## Neighborhood Analysis

Subnet: 162.216.149.0/24

• Total Siblings: 44 IPs
• Active Siblings: 28 IPs
• Threat Siblings: 21 IPs
• Abuse Density: 0.4773 (moderate)
• Classification: Mixed

Risk Distribution in Subnet:

• High Risk: 0 IPs
• Medium Risk: 19 IPs
• Low Risk: 32 IPs

Sample High-Risk Neighbors:

• 162.216.149.35 (Risk Score: 50)
• 162.216.149.29 (Risk Score: 40)

---

## Observation History

Signal Count: 30 observations

Recent Observations (June 2026):

• June 25, 2026: Confirmed cloud infrastructure (Google Cloud), CDN: No, Proxy: No, Tor: No, Mobile: No
• June 19, 2026: Subnet abuse density observed (0.4773, mixed classification), RTT validation discrepancies noted
• June 19, 2026: Operator score: 0.3478 (Basic classification)

Temporal Analysis:

• Ownership changes: 0
• Threat persistence days: 0
• Threat observation count: 1
• Persistently malicious: No

---

## Entity Relationships

Identified Relationships: 91 total

Primary Associations:

• Network: GOOGLE-CLOUD (multiple instances)
• DNS: 83.149.216.162.bc.googleusercontent.com
• Infrastructure: Cloud Compute environment

---

## Recommended Actions

Security Recommendations: None

Firewall Rules: Not required

Risk Level: Low

Suggested Monitoring:

• Monitor for any changes in risk score or threat indicators
• Track subnet abuse density trends
• Verify geolocation accuracy for forensic purposes
• Review any traffic anomalies from related IPs in the 162.216.149.0/24 subnet

---

## Analyst Notes

This IP address represents legitimate Google Cloud infrastructure with no current malicious indicators. The low risk score and absence of threat indicators support continued monitoring rather than blocking. However, SOC teams should remain aware that the parent subnet contains 21 threat siblings and should investigate any suspicious traffic patterns from related addresses. The geolocation data discrepancy warrants validation if this IP is used as a reference point for threat attribution.

Confidence Level: High

Next Review: As conditions change or new threat indicators emerge

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.