# IP Intelligence Briefing: 34.86.162.196
## Executive Summary
IP address 34.86.162.196 is identified as a Google Cloud infrastructure endpoint with a low-risk profile (Risk Score: 25). The IP resolves to Google's cloud hosting service with no active threat indicators, no blacklist associations, and zero threat observations in the historical record.
---
## Technical Profile
Ownership & Network
| Attribute | Value |
|---|---|
| Organization | Google LLC |
| ASN | 396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 34.64.0.0/10 |
| RIR | ARIN |
| Infrastructure Type | Google Cloud |
Geolocation
| Attribute | Value |
|---|---|
| Country | US |
| Region | District of Columbia |
| City | Washington |
| Geo Validation | β οΈ Implausible (6,295 km from probe) |
DNS Resolution
- PTR Hostname: 196.162.86.34.bc.googleusercontent.com
- Forward Resolution: Confirmed (1 hostname)
- Domain: googleusercontent.com
- Email Auth: SPF and DMARC records present
Service Fingerprint
| Attribute | Value |
|---|---|
| HTTP Port | 80/tcp |
| Server Banner | nginx |
| TLS Certificate | None detected |
| Service Purpose | Single-Service Host |
---
## Threat Assessment
Risk Indicators
- Risk Score: 25/100 (Low Risk)
- Abuse Confidence: Not applicable (Google Cloud infrastructure)
- Blacklist Count: 0
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
Control Plane Analysis
- BGP Prefix: 34.86.160.0/20
- Route Stability: Unstable
- DNSSEC: Valid
- DNSBL Listed: 1/8 checks
- Operator Score: 0.3478 (Basic)
---
## Historical Observation
Total observations recorded: 22
Recent signal timeline:
- 2026-08-06: Port scan activity detected, nginx banner confirmed
- 2026-08-06: No attacker classification, no Tor exit
- 2026-08-05: Basic operator classification score 0.3478
- 2026-07-30: No campaign correlations, zero correlated IPs
Threat Persistence: None detected
Threat Observation Count: 0
Persistence Label: Not persistently malicious
---
## Relationship Graph
Total Relationships: 16
- DNS Associations: 196.162.86.34.bc.googleusercontent.com (6 instances)
- Network Associations: GOOGL-2 (10 instances)
---
## Neighborhood Analysis
Subnet: 34.86.162.196/24
| Metric | Value |
|---|---|
| Abuse Density | 0.0 |
| Classification | Clean |
| Sibling IPs | 1 total, 1 active |
| Threat Siblings | 0 |
---
## Security Recommendations
Actionable Measures
No immediate security actions required. The IP demonstrates legitimate cloud infrastructure behavior with no malicious indicators.
Firewall Rules
No specific firewall rules recommended due to low risk profile.
Monitoring Considerations
- Monitor for changes in service banners or port availability
- Verify geolocation consistency if security concerns arise
- No correlation with known threat campaigns
---
## Conclusion
IP 34.86.162.196 represents standard Google Cloud infrastructure with legitimate hosting purposes. The geolocation validation anomaly (RTT discrepancy) warrants awareness but does not indicate malicious activity. No defensive actions are required at this time.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 34.64.0.0/10 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 196.162.86.34.bc.googleusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 196.162.86.34.bc.googleusercontent.com |
π DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | nginx |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 36% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 37% | 2 | 3 |
| ownership | 30% | 2 | 3 |
| reputation | 28% | 1 | 3 |
| geolocation | 35% | 2 | 3 |
| Overall | 30% | 10 | 17 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-07-29 16:42:04 UTC |
| Last Seen | 2026-08-12 23:53:04 UTC |
| Profile Built | 2026-08-13 00:08:26 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 23 |
Full dossier details are available via our API.