# IP Intelligence Briefing
Target IP: 34.79.37.189/32
Date: 2026-06-20
Classification: Low Risk - Cloud Infrastructure
---
## Executive Summary
IP address 34.79.37.189 is a legitimate Google Cloud Compute infrastructure endpoint with a low-risk profile (Risk Score: 25). No active threat indicators, malware campaigns, or malicious reputation sources were detected. The IP operates within a clean subnet with zero abuse density and no neighboring threat activity.
---
## Infrastructure Profile
Ownership & Registration:
- ASN: 396982 (Google LLC)
- Organization: Google LLC
- Infrastructure Type: CloudCompute
- Classification: Cloud-hosted (Google Cloud Platform)
Geolocation:
- Country: Belgium (BE)
- Region: Wallonia (WAL)
- City: St. Ghislain
- Coordinates: 50.45°N, 3.82°E
- Accuracy Radius: 150km
Network Role:
- Service Purpose: Firewalled / No Services
- Open Ports: None detected
- Hosting Flag: Active
- Anycast: No
---
## Threat Assessment
Risk Score: 25/100 (Low Risk)
Threat Indicators:
- Known Attacker: No
- Tor Exit Node: No
- Spam Source: No
- Known Campaigns: None
- Blacklist Count: 0
DNSBL Status: Listed on 1 of 8 threat feeds (dnsblListedCount: 1)
- Operator Score: 0.2174 (Minimal)
---
## Technical Observations
DNS Configuration:
- PTR Hostname: 189.37.79.34.bc.googleusercontent.com
- Forward Resolution: Confirmed
- DNSSEC Validation: Valid
- CAA Records: Present
- SPF/DMARC: Not configured at IP level
Control Plane:
- BGP Prefix: 34.79.32.0/20
- Route Stability: Not stable
- RPKI State: Not reported
- Route Changes (30d): 0
---
## Historical Analysis
Observation Count: 21 signals recorded
Recent Activity (2026-06-20):
- Geolocation signals consistently resolve to St. Ghislain, Belgium
- DNSSEC validation remained valid across observations
- Operator classification maintained at "Minimal"
- No ownership changes detected
Temporal Indicators:
- Threat Persistence Days: 0
- Is Persistently Malicious: No
- Threat Observation Count: 0
---
## Relationship Network
Identified Associations:
- DNS Association: 189.37.79.34.bc.googleusercontent.com
- Network Group: GOOGL-2
- Total Relationships: 49
No anomalous relationships to malicious domains, certificates, or organizations were identified.
---
## Neighborhood Analysis
Subnet: 34.79.37.189/24
- Abuse Density: 0%
- Classification: Clean
- Total Siblings: 1
- Active Siblings: 1
- Threat Siblings: 0
No malicious activity detected within the /24 subnet.
---
## Recommended Actions
Security Posture: Accept as benign cloud infrastructure. No blocking or filtering recommended.
Monitoring Parameters:
- Track for service changes (currently firewalled)
- Monitor DNSBL status (1 listing among 8 feeds)
- Routine geolocation validation (ICMP probes blocked)
Firewall Rules: None required. Traffic may be permitted or filtered based on organizational policy for Google Cloud infrastructure.
---
## Conclusion
IP 34.79.37.189 represents standard Google Cloud Platform infrastructure with no evidence of malicious activity. The IP is properly registered, geographically consistent with its hosting provider's region, and operates within a clean network neighborhood. No security actions are recommended beyond standard baseline monitoring.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | โ |
| CIDR Block | โ |
| RIR | ARIN |
| Country | โ |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | 189.37.79.34.bc.googleusercontent.com |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | 189.37.79.34.bc.googleusercontent.com |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting โ Infrastructure provider without advanced routing |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 24% | 2 | 3 |
| routing | 8% | 1 | 1 |
| services | 12% | 2 | 2 |
| ownership | 20% | 2 | 3 |
| reputation | 18% | 1 | 2 |
| geolocation | 34% | 2 | 3 |
| Overall | 19% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-05-24 06:33:39 UTC |
| Last Seen | 2026-06-28 23:49:01 UTC |
| Profile Built | 2026-06-29 05:50:42 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 23 |
Full dossier details are available via our API.