IP Intelligence Briefing: 34.186.13.91/32
Summary
The IP address 34.186.13.91 belongs to Google LLC (GOOGL-2, ASN 396982) and is classified as Moderate Risk with a risk score of 40. The endpoint is identified as cloud infrastructure (Google Cloud) with firewalled/no services detected and no open ports.
Ownership and Network Context
- Organization: Google LLC
- Network Block: 34.128.0.0/10 (GOOGL-2)
- ASN: 396982
- Location: Las Vegas, NV, US (36.17, -115.14)
- Network Role: CloudCompute provider infrastructure
Technical Profile
- DNS Resolution: 91.13.186.34.bc.googleusercontent.com (googleusercontent.com)
- PTR Hostname: 91.13.186.34.bc.googleusercontent.com
- Email Authentication: SPF and DMARC records present
- Services: No open ports detected; infrastructure is firewalled
- TLS/Certificate Data: No certificates or HTTP titles observed
Threat Indicators
- Abuse Indicators: None identified
- Blacklist Status: Listed on 2 DNSBLs (2 of 8 total lists)
- Known Campaigns: None associated
- Is Tor Exit/Attacker/Spam Source: No
- Abuse Confidence Score: Null (insufficient data)
Behavioral History
Eighteen observations recorded. Recent subnet classifications indicate "clean" status with zero threat siblings. No evidence of persistent malicious behavior observed. Ownership changes recorded at zero.
Geolocation Validation
Geo validation flagged an RTT anomaly: measured 88ms RTT is below the minimum possible 173.3ms for an 8,666km distance from probe location. This suggests the geolocation may be inferred rather than directly measured.
Network Neighborhood Analysis
The /24 subnet (34.186.13.0/24) contains one sibling IP address:
- 34.186.13.138: Risk score 25, authority score 90
- Subnet Abuse Density: 0 (clean)
- No high or medium-risk neighbors detected
Relationship Graph
Eight relationship links identified, primarily DNS associations to the same googleusercontent.com hostname and same-network references to GOOGL-2.
Recommended Actions
No specific firewall rules or blocking recommendations generated. The IP profile indicates legitimate cloud infrastructure with no active threat indicators.
Assessment
This IP represents Google Cloud infrastructure with standard cloud security posture. The moderate risk score (40) reflects DNSBL listings and geovalidation anomalies rather than confirmed malicious activity. No immediate threat action required; continue standard monitoring.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 34.128.0.0/10 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 91.13.186.34.bc.googleusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 91.13.186.34.bc.googleusercontent.com |
π DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | 1/4 domains |
| DMARC | 1/4 domains |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
| Domains Checked | 4 domains |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | β |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | kuberneteskubernetes.defaultkubernetes.default.svckubernetes.default.svc.cluster.local |
| Valid From | 2026-08-24T05:18:48+00:00 |
| Valid Until | 2027-08-24T05:20:48+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 365 days |
| Serial Number | 00AE38DC2A95E2E5839E78455372865A23 |
| Thumbprint | E8E6A0555FE81BC433CFD0CCF1117C95D39A7550 |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 31% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 35% | 2 | 3 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 25% | 10 | 15 |
| Data Coherence | Mostly Consistent (80%) β 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-08-09 04:43:06 UTC |
| Last Seen | 2026-08-30 20:30:49 UTC |
| Profile Built | 2026-08-30 20:37:19 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 32 |
Full dossier details are available via our API.