IP INTELLIGENCE BRIEFING: 34.32.45.118/32
Executive Summary:
The target IP address 34.32.45.118 is a Google Cloud infrastructure host classified as moderate risk (risk score: 50). The address is associated with Google LLC (ASN 396982) under the GOOGL-2 network block. Despite the moderate risk classification, the IP exhibits no active threat indicators and resides within a clean subnet with zero abuse density.
Ownership and Infrastructure:
The IP belongs to Google LLC, operating within the 34.4.5.0/24 CIDR block under ARIN registration. The infrastructure is classified as cloud compute infrastructure (Google Cloud provider). The IP resolves to the ptr hostname 118.45.32.34.bc.googleusercontent.com under the googleusercontent.com domain.
Geolocation:
Geolocation data indicates Berlin, Germany (DE), with 459.5km distance variance from claimed coordinates and RTT measurements averaging 109.2ms. Geo data is validated as plausible across multiple sources.
Network Services:
Port 22 (SSH) is open with banner: SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.16. No HTTP/HTTPS services were detected. The IP is hosted infrastructure but not identified as CDN, VPN, proxy, or Tor exit node.
Threat Posture:
No threat indicators were detected. The IP is not flagged as known attacker, spam source, or Tor exit node. Blacklist count is zero. Campaign likelihood is rated as none. DNSBL listing shows 2 out of 8 total lists. The IP is not persistently malicious with zero threat observation count.
Subnet Context:
The /24 subnet (34.32.45.0/24) is classified as clean with zero abuse density and zero threat siblings. Only one sibling IP was observed as active. The neighborhood inherits no significant risk from neighboring addresses.
Historical Activity:
Analysis of 19 observation signals from 2026-08-06 indicates stable behavior with no ownership changes or persistent malicious activity. Subnet classification remained clean throughout the observation period. No campaign correlations or certificate matches were observed.
Recommendations:
The IP exhibits characteristics consistent with legitimate Google Cloud infrastructure hosting. However, the moderate risk classification warrants monitoring. Recommended actions:
- Allow traffic based on established Google Cloud provider reputation
- Monitor for unusual outbound connections or lateral movement patterns
- Implement standard cloud infrastructure logging and monitoring
- No immediate blocking recommended; maintain defensive monitoring posture
Verdict:
The IP address represents legitimate Google Cloud infrastructure with no evidence of malicious activity. Standard cloud provider traffic filtering policies apply.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 34.4.5.0/24 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | 118.45.32.34.bc.googleusercontent.com |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | 118.45.32.34.bc.googleusercontent.com |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 3 |
| routing | 17% | 1 | 1 |
| services | 24% | 2 | 2 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 35% | 2 | 3 |
| Overall | 27% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-08-03 11:22:27 UTC |
| Last Seen | 2026-08-13 04:59:00 UTC |
| Profile Built | 2026-08-13 05:12:19 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 25 |
Full dossier details are available via our API.