34.80.184.117📋 Copy

# IP Intelligence Briefing: 34.80.184.117/32

## Executive Summary

IP address 34.80.184.117 is a low-risk Google Cloud infrastructure endpoint associated with legitimate Google services. Current threat assessment indicates minimal malicious activity, though the IP appears on one DNS blacklist with high severity rating.

## Profile Overview

## Network Classification

• Provider Infrastructure: Google Cloud Platform
• CDN: No
• Vpn/Proxy: No
• Tor Exit: No
• Hosting: No
• Mobile/Residential: No
• Anycast: No

## Service Analysis

• Open Ports: TCP/22 (SSH) - OpenSSH_9.6p1 Ubuntu-3ubuntu13.18
• TLS Certificate: Not configured
• HTTP Service: Not responding
• Email Authentication: SPF and DMARC records present

## Threat Indicators

• Blacklist Status: Listed on 1 of 8 DNSBLs (high severity)
• Abuse Confidence: Not available
• Known Campaigns: None identified
• Campaign Likelihood: None
• Threat Persistence: 0 days observed

## Control Plane Intelligence

• BGP Prefix: 34.80.176.0/20
• Route Stability: Unstable
• DNSSEC: Valid
• DNSBL Listings: 1/8 total lists
• Operator Score: 0.3478 (Basic)

## Observation History

Historical analysis across 21 observations (through August 2026) shows:

• Recent blacklist activity recorded on 2026-08-13 with high severity listing
• Consistent cloud infrastructure classification
• Subnet abuse density rated at 1 (mostly clean)
• No persistent malicious behavior detected

## Neighborhood Assessment

## Relationships

• DNS Associations: 117.184.80.34.bc.googleusercontent.com (primary reverse DNS target)
• Network Affiliations: Multiple references to GOOGL-2 network range
• Total Relationships: 16

## Recommended Actions

Based on the low-risk profile and legitimate cloud infrastructure classification:

• Firewall Rules: No immediate blocking recommended
• Monitoring: Continue standard observation
• Exception: Investigate the single high-severity DNSBL listing if not associated with Google's own infrastructure
• Context: SSH service detected - verify if this is expected for your use case

## Conclusion

This IP address represents legitimate Google Cloud infrastructure with a low-risk profile. The single blacklist listing warrants investigation but does not indicate active malicious behavior. No immediate blocking action is recommended unless organizational policy requires blocking all Google Cloud IPs.

Classification: LOW RISK - Legitimate Cloud Infrastructure

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.