IP Intelligence Briefing: 34.181.246.173
Date: 2026-06-11
---
**1. Core Profile**
- Risk Rating: Moderate Risk (Risk Score: 50)
- Provider: Google LLC (AS15169, GOOGL-2)
- Geolocation: Ashburn, Virginia, US (39.04°N, -77.49°E)
- Network Role: Cloud infrastructure (Google Cloud)
- Threat Indicators: No direct malicious indicators (no malware, C2, or spam sources).
---
**2. Observation History**
- Recent Activity:
- 2026-06-11: Detected as a potential threat (confidence: 75%) with 2 pulse matches (unknown campaigns).
- 2026-06-01: No persistent malicious activity; threat observation count: 1.
- Trend: Mixed signalsβno long-term malicious persistence, but recent ambiguity in threat classification.
---
**3. Network Relationships**
- DNS Associations:
- `173.246.181.34.bc.googleusercontent.com` (Google Cloud infrastructure).
- Network Links:
- Subnet: `34.181.128.0/17` (AS15169, Google LLC).
- No direct links to malicious subnets or organizations.
---
**4. Neighborhood Analysis**
- Subnet: `34.181.246.173/24`
- Abuse Density: 1 (low risk, "mostly clean" classification).
- Neighbors: No active or malicious sibling IPs in the subnet.
---
**5. Key Findings**
- Legitimate Infrastructure: IP is part of Google Cloud, with no direct malicious activity.
- Ambiguous Threat Signal: Recent observation flagged the IP as "has_threats" (confidence 75%), but no specific indicators (malware, C2, spam).
- Subnet Risk: Low abuse density, but monitor for unusual activity due to mixed signal.
---
**6. Recommendations**
1. Monitor Traffic: Track DNS queries and network behavior for anomalies (e.g., unexpected outbound connections).
2. Verify Threat Signals: Cross-check with internal threat feeds to validate the "has_threats" flag.
3. Access Controls: Ensure cloud access policies restrict unnecessary traffic to this subnet.
4. Subnet Review: Periodically audit the `34.181.128.0/17` subnet for potential lateral movement risks.
---
Source: IPDebrief Threat Intelligence Platform | © 2026 Jason Alberino.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 34.128.0.0/10 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 173.246.181.34.bc.googleusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 173.246.181.34.bc.googleusercontent.com |
π DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting β Infrastructure provider without advanced routing |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 37% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 21% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 32% | 1 | 3 |
| geolocation | 34% | 2 | 3 |
| Overall | 26% | 10 | 16 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-05-27 13:17:35 UTC |
| Last Seen | 2026-06-29 04:22:49 UTC |
| Profile Built | 2026-06-29 10:25:38 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 26 |
Full dossier details are available via our API.