34.17.59.182📋 Copy

# IP Intelligence Briefing: 34.17.59.182

## Executive Summary

IP 34.17.59.182 is a Google Cloud infrastructure endpoint with moderate risk scoring (40/100). The address hosts an SSH service and appears in DNSBL listings, warranting defensive monitoring. No active malicious campaigns or known attacker indicators detected.

## Profile Overview

• Risk Score: 40 (Moderate Risk)
• Organization: Google LLC (ASN 396982)
• Network: GOOGL-2, 34.4.5.0/24
• Geolocation: Turin, Piedmont, US (geo consensus: false; multiple sources)
• Cloud Classification: Google Cloud provider, cloud compute infrastructure
• Infrastructure Type: Single-Service Host

## Threat Indicators

• Blacklist Status: Listed on 2 of 8 DNSBL sources
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Known Campaigns: None detected
• Abuse Confidence Score: Not reported

## Network Services

• Open Ports: TCP/22 (SSH - OpenSSH 9.6p1 Ubuntu-3ubuntu13.18)
• DNS PTR: 182.59.17.34.bc.googleusercontent.com
• Email Auth: SPF and DMARC configured

## Control Plane Analysis

• Route Stability: Not stable
• DNSSEC Valid: Yes
• DNSBL Listings: 2/8
• BGP Prefix: 34.17.0.0/16
• Operator Score: 0.3478 (Basic)

## Historical Observations

Recent signal history (August 2026) shows:

• Geolocation variance between US (Turin) and Italy reporting
• Operator score consistently around 0.3478
• No persistent malicious activity detected
• SSH service continuously observed
• Risk scores have fluctuated (66 in proxycheck-io VPN detection)

## Network Neighborhood

• /24 Subnet: 34.17.59.0/24
• Abuse Density: 0
• Threat Siblings: 0
• Active Siblings: 0
• Classification indicates no inherited risk from neighbors

## Relationships

• DNS Associations: Multiple entries pointing to 182.59.17.34.bc.googleusercontent.com
• Network Relationships: Consistent GOOGL-2 network membership

## Recommended Actions

1. Monitor SSH Traffic: Open port 22 on Google Cloud infrastructure—verify legitimate use

2. DNSBL Investigation: Review 2 DNSBL listings for potential reputation impact

3. Geolocation Verification: Geo inconsistencies detected; cross-reference with internal logs

4. Route Stability: Monitor BGP prefix 34.17.0.0/16 for stability changes

## Risk Assessment

This IP represents legitimate Google Cloud infrastructure with moderate risk primarily due to DNSBL listings. No evidence of malicious activity or known threat campaigns. The open SSH port on cloud infrastructure is typical for administration access. Continue monitoring for behavioral anomalies rather than treating as inherently malicious.

Classification: Defensive Monitoring Recommended | Priority: Medium

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.