34.131.16.247📋 Copy

IP Intelligence Briefing: 34.131.16.247

Classification: Google Cloud Infrastructure (Moderate Risk)

Executive Summary

IP 34.131.16.247 is a Google Cloud Compute instance located in Delhi, India (34.128.0.0/10 network). The IP exhibits a moderate risk score of 40 with no persistent malicious activity detected. The neighborhood shows zero abuse density, and no correlated threat siblings exist within the /24 subnet.

Ownership & Infrastructure

• Organization: Google LLC (ASN 396982)
• Network: GOOGL-2 (34.128.0.0/10)
• Infrastructure Type: CloudCompute
• Geolocation: Delhi, India (28.57°N, 77.09°E)
• DNS: 247.16.131.34.bc.googleusercontent.com
• Open Ports: 22/TCP (SSH - OpenSSH_9.6p1 Ubuntu-3ubuntu13.18)

Threat Indicators

• Risk Score: 40 (Moderate Risk)
• Blacklist Status: Listed on 8 DNSBLs (2 actively flagged)
• Campaign Association: None identified
• Tor/Proxy/VPN: Not detected
• Known Attacker: No
• Spam Source: No

Temporal Analysis

• Observation Count: 24 historical signals
• Recent Activity: August 13, 2026 showed high-severity listings on some threat feeds
• Persistence: Not persistently malicious
• Ownership Stability: 0 ownership changes recorded

Network Context

• Subnet: 34.131.16.0/24
• Abuse Density: 0.0 (clean)
• Threat Siblings: 0
• Classification: Clean neighborhood

Recommendations

1. Allow Traffic: This is legitimate Google Cloud infrastructure. Blocklists appear to be false positives or legitimate security indicators.

2. Monitor SSH: Open port 22 is standard for cloud instances. Validate inbound SSH access against organizational policies.

3. Correlation: All DNS relationships resolve to Google hostnames (googleusercontent.com), confirming legitimate cloud infrastructure.

4. Action: No firewall rules required. Standard Google Cloud egress/ingress policies apply.

Confidence Level: High

Analysis Notes

The IP's risk profile aligns with normal Google Cloud behavior. The blacklist presence warrants attention but the clean neighborhood and lack of persistent malicious indicators suggest legitimate infrastructure. Recommend treating as trusted cloud infrastructure unless additional IOCs emerge.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.