IP INTELLIGENCE BRIEFING: 34.85.111.89/32
Assessment Date: Current (as of latest data)
IP Classification: Legitimate Cloud Infrastructure (Low Risk)
---
**EXECUTIVE SUMMARY**
IP address 34.85.111.89 is identified as Google Cloud infrastructure with a low-risk profile. The IP demonstrates legitimate cloud service characteristics with no malicious threat indicators observed across all intelligence sources.
---
**OWNERSHIP & INFRASTRUCTURE**
- Organization: Google LLC
- ASN: 396982
- Network: GOOGL-2 (34.64.0.0/10)
- Infrastructure Type: Cloud Compute
- Geolocation: Tokyo, Japan (13)
- Coordinates: 35.68, 139.69
- Timezone: Asia/Tokyo
Network Role Analysis:
- Cloud Provider: Google Cloud Platform
- Connection Type: Firewalled / No Services
- Infrastructure: No open ports detected
- Anycast/Proxy: Not identified
---
**THREAT INTELLIGENCE PROFILE**
| Metric | Value |
|---|---|
| **Overall Risk Score** | 25 (Low Risk) |
| **Abuse Confidence Score** | N/A |
| **Blacklist Count** | 0 |
| **Known Attacker** | False |
| **Spam Source** | False |
| **Tor Exit Node** | False |
Threat Indicators: None detected
Known Campaigns: None associated
---
**DNS & NETWORK BEHAVIOR**
- PTR Hostname: 89.111.85.34.bc.googleusercontent.com
- Forward Resolution: 89.111.85.34.bc.googleusercontent.com
- Domain: googleusercontent.com
- Email Auth: SPF and DMARC configured
- Control Plane: BGP prefix 34.85.96.0/20
- Route Stability: Not stable
- DNSBL Status: 1 listing out of 8 total lists
---
**OBSERVATION HISTORY**
Analysis of 20 signal observations reveals consistent cloud infrastructure behavior:
- June 2026 observations confirm Google Cloud hosting characteristics
- Location inference: Tokyo, Japan (confidence 0.56)
- No persistent malicious activity detected
- Infrastructure classification: CloudCompute
- Threat persistence: None observed
---
**RELATIONSHIP ANALYSIS**
9 Relationships Identified:
- Primary association: googleusercontent.com DNS hostnames
- Network affiliation: GOOGL-2 network
- No malicious entity connections
Relationship Types:
- DNS Associations: 6 instances
- Same Network: 3 instances to GOOGL-2
---
**SUBNET NEIGHBORHOOD**
- Subnet: 34.85.111.89/24
- Abuse Density: 0
- Classification: Clean
- Total Siblings: 1
- Active Siblings: 0
- Threat Siblings: 0
---
**RECOMMENDATIONS & ACTIONS**
Security Actions: No blocking or filtering required. IP classified as legitimate cloud infrastructure.
SOC Analyst Notes:
- Monitor for any behavioral changes if this IP appears in incident logs
- No immediate threat action required
- Standard Google Cloud infrastructure IP with no abuse indicators
- Consider whitelisting if associated with legitimate business operations
Firewall Rule Status: No recommended rules generated. Current behavior indicates benign cloud service usage.
---
Classification: LOW RISK - LEGITIMATE INFRASTRUCTURE
Action: Monitor / No Action Required
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 34.64.0.0/10 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | 89.111.85.34.bc.googleusercontent.com |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | 89.111.85.34.bc.googleusercontent.com |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 3 |
| routing | 17% | 1 | 1 |
| services | 24% | 2 | 2 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 17% | 1 | 1 |
| Overall | 24% | 9 | 12 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-06-13 03:45:42 UTC |
| Last Seen | 2026-06-21 20:24:30 UTC |
| Profile Built | 2026-06-21 20:33:31 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 21 |
Full dossier details are available via our API.