# IP Intelligence Briefing: 34.131.72.18/32
Classification: Moderate Risk | Status: Active Investigation | Date: 2026-08-06
---
## Executive Summary
IP address 34.131.72.18 is associated with Google Cloud infrastructure (ASN 396982) and presents a moderate risk profile with a risk score of 50. The IP resolves to googleusercontent.com and is geolocated to the National Capital Territory of Delhi, India. While classified under Google Cloud's provider infrastructure, the IP shows no open services and is currently firewalled with no accessible endpoints.
---
## Infrastructure Profile
| Attribute | Value |
|---|---|
| **IP Address** | 34.131.72.18/32 |
| **Risk Score** | 50 (Moderate Risk) |
| **ASN** | 396982 (GOOGL-2) |
| **Organization** | Google LLC |
| **CIDR Block** | 34.128.0.0/10 |
| **Geolocation** | Delhi, India (IN) |
| **Network Role** | Provider (Google Cloud) |
| **Service Purpose** | Firewalled / No Services |
---
## Threat Indicators
Threat Assessment: No active threat indicators detected.
| Indicator | Status |
|---|---|
| Known Attacker | No |
| Tor Exit Node | No |
| Spam Source | No |
| Blacklist Count | 0 |
| Known Campaigns | None |
| Threat Persistence | 0 days |
| Persistently Malicious | No |
DNSBL Status: Listed on 2 out of 8 threat feeds (2 DNSBL listings).
---
## Network Classification
| Classification | Status |
|---|---|
| Cloud Infrastructure | Yes (Google Cloud) |
| CDN | No |
| VPN | No |
| Proxy | No |
| Tor Network | No |
| Hosting | No |
| Mobile Network | No |
| Residential | No |
| Bogon | No |
| Anycast | No |
---
## DNS Analysis
| Parameter | Value |
|---|---|
| **PTR Hostname** | 18.72.131.34.bc.googleusercontent.com |
| **Forward Resolution** | Confirmed |
| **Domain** | googleusercontent.com |
| **Email Auth** | SPF: Yes, DMARC: Yes |
| **Forward Hostnames** | 18.72.131.34.bc.googleusercontent.com |
---
## Network Neighborhood Assessment
Subnet: 34.131.72.18/24
| Metric | Value |
|---|---|
| Abuse Density | 0 (Clean) |
| Total Siblings | 1 |
| Active Siblings | 0 |
| Threat Siblings | 0 |
| Subnet Classification | Clean |
| Inherited Risk | 0 |
Assessment: The /24 subnet shows no abuse activity and maintains a clean classification. No sibling IPs exhibit threat indicators.
---
## Observation History
Total Observations: 17 signals recorded
Recent Activity:
- 2026-08-06 06:54:20: Geo-location signal (confidence 0.90)
- 2026-08-06 06:52:30: Ownership verification (confidence 0.85)
- 2026-08-06 06:51:52: Subnet classification (confidence 0.40)
- 2026-08-06 06:51:23: Geo-location signal US (confidence 0.35)
- 2026-08-06 06:50:17: Ownership resolution to Google LLC (confidence 0.90)
Temporal Analysis:
- Ownership Changes: 0
- Threat Persistence: 0 days
- Threat Observation Count: 0
- Is Persistently Malicious: No
---
## Control Plane Analysis
| Metric | Value |
|---|---|
| Origin ASN | 396982 |
| BGP Prefix | 34.131.64.0/20 |
| Route Stable | No |
| Is Route Stable | No |
| Is MOAS | No |
| DNSSEC Valid | Yes |
| Has CAA | Yes |
| Operator Score | 0.3478 |
| Operator Label | Basic |
---
## Recommended Actions
Current Risk Score: 50 (Moderate)
Recommended Firewall Rules:
```bash
# iptables
iptables -A INPUT -s 34.131.72.18 -j DROP
# nftables
nft add rule inet filter input ip saddr 34.131.72.18 drop
# nginx
deny 34.131.72.18;
# pfSense
34.131.72.18/32
# Cloudflare WAF
{"description":"Block 34.131.72.18 โ IPDebrief risk score 50","action":"block","filter":{"expression":"ip.src eq 34.131.72.18"}}
# AWS WAF
{"Addresses":["34.131.72.18/32"],"Description":"IPDebrief risk 50"}
```
---
## Intelligence Assessment
IP 34.131.72.18 presents a moderate risk profile despite being associated with
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 34.128.0.0/10 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | 18.72.131.34.bc.googleusercontent.com |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | 18.72.131.34.bc.googleusercontent.com |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Single-Service Host |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
| SSH Version | SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18 |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Mostly Consistent (85%) โ 1 contradiction(s) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-08-04 17:59:43 UTC |
| Last Seen | 2026-08-13 06:44:21 UTC |
| Profile Built | 2026-08-06 07:02:47 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 21 |
Full dossier details are available via our API.