Intelligence Briefing: 173.194.185.135/32
Asset Identification
The IP 173.194.185.135/32 was confirmed as infrastructure owned by Google LLC (AS15169, 173.194.0.0/16). The network role was classified as CloudCompute with a service purpose of Web Server.
Technical Observations
The host operated on ports 80 (HTTP) and 443 (HTTPS). Server banners returned "gvs 1.0" using HTTP/1.1. TLS certificates were issued by Google Trust Services for `*.c.docs.google.com`. DNS hygiene scores were rated Excellent, with SPF, DMARC, and CAA records validated.
Threat Posture
Risk assessment assigned a Low Risk score of 25. No indicators of compromise, blacklists, or abuse reports were present. Behavioral analysis found no enumeration strikes, WAF violations, or known campaign associations.
Anomalies
A data contradiction was noted between the claimed New York, US geolocation and RTT physics measurements (19.0ms < 152.5ms minimum possible). This discrepancy reduced the overall data coherence score.
Operational Recommendation
The profile recommended a Monitor action with Low severity. No mitigation rules were required, but the signal contradiction mandated continued observation. The IP remained active during the 2026-09-15 to 2026-09-22 period.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Google LLC |
| ASN | AS15169 |
| Network Name | |
| CIDR Block | 173.194.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | lga34s26-in-f7.1e100.net |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | lga34s26-in-f7.1e100.net |
π DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | 9/9 domains |
| DMARC | 9/9 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Present |
| Domains Checked | 9 domains |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting β Infrastructure provider without advanced routing |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | β |
| 443 | https | tcp | β |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | gvs 1.0 |
| HTTP Title | β |
π TLS Certificate
| SANs | *.c.docs.google.com*.a1.googlevideo.com*.bdn.dev*.origin-test.bdn.dev*.c.2mdn.net*.c.bigcache.googleapis.com*.c.chat.google.com*.c.doc-0-0-sj.sj.googleusercontent.com*.c.drive.google.com*.c.googlesyndication.com |
| Valid From | 2026-08-25T12:31:58+00:00 |
| Valid Until | 2026-11-03T12:31:57+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 69 days |
| Serial Number | 6BAECB26EF040D521266DCC639DF0435 |
| Thumbprint | 4B229DCF11652175540DF2870F24F0C94018BAC2 |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 42% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 33% | 2 | 4 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 1 |
| geolocation | 35% | 2 | 3 |
| Overall | 27% | 10 | 15 |
| Data Coherence | Mostly Consistent (80%) β 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-09-15 02:47:40 UTC |
| Last Seen | 2026-09-22 11:39:11 UTC |
| Profile Built | 2026-09-22 11:51:22 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 39 |
Full dossier details are available via our API.