IPDebrief

34.79.214.25

IP Intelligence Dossier
Your IP: 216.73.216.123
{ } JSON ๐Ÿ”ง Full Actions API
๐Ÿค– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

# IP INTELLIGENCE BRIEFING: 34.79.214.25/32

Classification: Google Cloud Infrastructure - Low Risk

Date: Current Analysis

Analyst: IPDebrief Intelligence Team

---

## EXECUTIVE SUMMARY

IP 34.79.214.25 is identified as Google Cloud infrastructure (AS396982, Google LLC) with an overall risk score of 25/100. The address demonstrates consistent low-risk characteristics across historical observations. No active threat indicators were detected. This IP is classified as legitimate cloud compute infrastructure with firewalled/no services exposure.

---

## INFRASTRUCTURE PROFILE

AttributeValue
**Organization**Google LLC
**AS Number**396982
**Network**34.79.208.0/20
**Location**Belgium - St. Ghislain (WAL region)
**Infrastructure Type**CloudCompute (Google Cloud Platform)
**Hosting Status**Enabled
**Anycast**No
**Proxy/Tor/VPN**Not detected

---

## THREAT ASSESSMENT

Current Risk Score: 25 (LOW)

Abuse Confidence Score: Not applicable

Blacklist Status: 0 lists

DNSBL Lists: 1/8 (minor listing, not significant)

Threat Indicators: NONE DETECTED

Historical Context: Earlier observation (2026-06-14) showed transient threat indicators with 4 pulse detections from AlienVault OTX. These appear to be historical artifacts with no current correlation. Current profile shows threat persistence of 0 days.

---

## NETWORK CONTEXT

DNS Resolution

Neighborhood Analysis (34.79.214.0/24)

- 34.79.214.116: Risk 25 (Low)

- 34.79.214.196: Risk 25 (Low)

The /24 subnet shows consistent low-risk profile with no high or medium risk neighbors.

---

## SERVICES & EXPOSURE

Open Ports: None detected

Service Banner: None (firewalled)

HTTP/HTTPS: No active services

TLS Certificate: None exposed

This indicates a properly configured cloud instance with no publicly accessible services, which is typical for backend infrastructure or protected endpoints.

---

## RELATIONSHIP GRAPH

Total Relationships: 45

---

## OBSERVATION HISTORY

Total Observations: 20 signals tracked

Timeline: 2026-06-14 to 2026-06-19

Key Historical Signals:

1. 2026-06-19: Operator score 0.3478, stability label "Basic"

2. 2026-06-14: Confirmed Google Cloud infrastructure with hosting capabilities; transient threat indicators noted (pulse_count: 4)

Trend Analysis: Risk profile remained stable with no significant degradation. The IP is not classified as persistently malicious.

---

## SECURITY RECOMMENDATIONS

Status: No blocking required

1. Traffic Policy: Allow legitimate traffic; no immediate blocking recommended

2. Monitoring: Standard monitoring appropriate; no enhanced scrutiny needed

3. Firewall Rules: No specific rules required beyond standard Google Cloud egress/ingress policies

4. Threat Hunting: No active threat indicators warrant investigation

---

## RISK CONCLUSION

IP 34.79.214.25 represents legitimate Google Cloud infrastructure with low-risk characteristics. The absence of open services, combined with consistent low-risk scoring across the /24 subnet and historical observations, indicates this is properly configured cloud compute infrastructure. No defensive action is required at this time.

Confidence Level: HIGH - Data sourced from 20+ historical observations with consistent profile alignment.

---

*Report generated via IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

๐ŸŒ Geolocation

Country๐Ÿ‡ง๐Ÿ‡ช Belgium
RegionWAL
CitySt. Ghislain
TimezoneEurope/Brussels
Latitude50.45
Longitude3.82

๐Ÿข Ownership & Registration

OrganizationGoogle LLC
ASNAS396982
Network Nameโ€”
CIDR Blockโ€”
RIRARIN
Countryโ€”
Abuse ContactAvailable via RDAP

๐ŸŒ DNS Intelligence

PTR25.214.79.34.bc.googleusercontent.com
Forward ConfirmedYes โ€” FCrDNS verified
Forward Hostnames25.214.79.34.bc.googleusercontent.com

๐Ÿ” DNS Hygiene

Hygiene Score100% (Excellent)
SPFPresent
DMARCPresent
FCrDNSVerified
DNSSECValid
CAAPresent

โ˜๏ธ Network Classification

InfrastructureInfrastructure / Datacenter
Service PurposeFirewalled / No Services
Network TierHosting โ€” Infrastructure provider without advanced routing
CloudHosting

๐Ÿ”Œ Services & Open Ports

PortServiceProtocolBanner
No open ports detected
Closed Ports22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned)
Serverโ€”
HTTP Titleโ€”

๐Ÿ” TLS Certificate

๐Ÿ”’
No certificate
Issued by โ€”
N/A
SANsNone
Valid Fromโ€”
Valid Untilโ€”

๐ŸŽฏ Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
26%
24
routing
8%
11
services
15%
22
ownership
20%
23
reputation
28%
13
geolocation
25%
22
Overall21%1015
Coverage: 6/6 dimensions ยท Data sufficiency: sufficient
Data CoherenceConsistent (100%)
AttributionModerate (70%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

๐Ÿ“… Observation Timeline ๐Ÿ”„ Live

First Seen2026-05-13 06:38:22 UTC
Last Seen2026-06-27 22:51:27 UTC
Profile Built2026-06-28 16:55:58 UTC
Data FreshnessLive
Signal Types21
Total Observations25
๐Ÿ” 21 signal types ยท 25 observations collected
This report is generated from 21+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API ๐Ÿ”ง Actions API ๐Ÿ“ง Enterprise Access

โ„น๏ธ About This Report

All data shown is publicly available network metadata โ€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.