34.48.110.165
# IPDEBRIEF INTELLIGENCE BRIEFING
Target: 34.48.110.165/32
Classification: Cloud Infrastructure
Risk Assessment: Moderate Risk (Score: 50/100)
---
## EXECUTIVE SUMMARY
The target IP 34.48.110.165 is a Google Cloud infrastructure address (GOOGL-2, ASN 396982) registered in the Washington, DC region. While classified as Moderate Risk, the IP shows no active malicious indicators. Geographic validation anomalies detected—claimed Washington location contradicts observed RTT metrics suggesting actual distance of 6,296km.
---
## OWNERSHIP AND INFRASTRUCTURE
| Attribute | Value |
|---|---|
| Organization | Google LLC |
| ASN | 396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 34.4.5.0/24 |
| Infrastructure Type | CloudCompute |
| Cloud Provider | Google Cloud |
| Registration | Arin |
---
## NETWORK SIGNALS
| Parameter | Observation |
|---|---|
| Open Ports | TCP/22 (SSH) |
| Reverse DNS | 165.110.48.34.bc.googleusercontent.com |
| Forward DNS | Confirmed (googleusercontent.com) |
| DNSBL Status | Listed on 2 of 8 checks |
| Email Auth | SPF and DMARC configured |
---
## GEOGRAPHIC VALIDATION
Status: INVALID
- Claimed Location: Washington, DC, US
- Observed RTT: 23ms
- Minimum Possible RTT for Claimed Distance: 125.9ms
- Inferred Distance: 6,295.7km
- Conclusion: Geographic claim is implausible; RTT indicates actual origin far from claimed location.
---
## THREAT INTELLIGENCE
| Indicator | Finding |
|---|---|
| Risk Score | 50 (Moderate) |
| Known Attacker | False |
| Tor Exit Node | False |
| Spam Source | False |
| Campaign Correlation | None |
| Persistent Malicious Activity | False |
| Neighborhood Abuse Density | 0% (Clean) |
| Threat Siblings in /24 | 0 |
---
## OBSERVATION HISTORY
20 signal observations recorded over recent monitoring period:
- Operator Score: 0.3478 (Basic operator classification)
- Geographic Validation: Consistently fails (RTT violations observed)
- DNSSEC: Valid
- Campaign Likelihood: None
- Threat Persistence Days: 0
---
## RELATIONSHIP MAPPING
- DNS Associations: 165.110.48.34.bc.googleusercontent.com
- Network Relationships: Multiple GOOGL-2 network references
- Total Relationships: 11 records
---
## RECOMMENDATIONS FOR SOC
1. Low Priority Monitoring: No immediate blocking required; IP is Google Cloud infrastructure
2. Monitor DNSBL Status: IP appears on 2 of 8 DNSBL lists—verify source legitimacy
3. Geographic Anomaly: Flag for review if legitimate traffic originates from claimed Washington DC location (contradicted by RTT data)
4. SSH Exposure: Port 22 is open—ensure ingress filtering if this is unexpected
5. No Action Required: Clean neighborhood, no threat indicators, stable infrastructure profile
---
Status: Monitor | Confidence: Medium | Last Updated: 2026-08-13
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 34.4.5.0/24 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 165.110.48.34.bc.googleusercontent.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | 165.110.48.34.bc.googleusercontent.com |
🔐 DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 3 |
| routing | 17% | 1 | 1 |
| services | 24% | 2 | 2 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 24% | 2 | 2 |
| Overall | 25% | 10 | 13 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-05 12:20:23 UTC |
| Last Seen | 2026-08-13 07:38:21 UTC |
| Profile Built | 2026-08-13 07:54:37 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 27 |
Full dossier details are available via our API.