34.97.211.247📋 Copy

# IP Intelligence Briefing: 34.97.211.247/32

Classification: Moderate Risk (Score: 50/100)

Report Date: 2026-08-13

Primary Infrastructure: Google Cloud Platform

## Executive Summary

IP address 34.97.211.247 is a Google Cloud Compute instance located in Osaka, Japan (ASN 396982, GOOGL-2 network). The IP maintains a moderate risk score of 50 and is classified as cloud infrastructure hosting services. The IP has been observed in 2 out of 8 DNSBL lists with maximum severity rated as high. Neighborhood analysis indicates the /24 subnet (34.97.211.0/24) shows zero abuse density and is classified as clean.

## Technical Profile

Ownership & Registration:

• ASN: 396982
• Organization: Google LLC
• Netname: GOOGL-2
• CIDR Block: 34.64.0.0/10
• RIR: ARIN

Geolocation:

• Country: Japan (JP)
• Region/City: Osaka
• Consensus: Valid across 1 geo-source

Network Role:

• Type: CloudCompute
• Provider: Google Cloud
• Infrastructure: Cloud-hosted single-service
• Classification: Hosting services enabled

DNS & Hostnames:

• PTR Record: 247.211.97.34.bc.googleusercontent.com
• Domain: googleusercontent.com
• Forward Resolution: Confirmed

Services & Ports:

• Open: TCP/22 (SSH - OpenSSH_8.9p1 Ubuntu-3ubuntu0.16)

Control Plane:

• BGP Prefix: 34.97.208.0/20
• Route Stability: Unstable
• Operator Score: 0.3478 (Basic)
• DNSBL Listings: 2 of 8 lists

## Historical Observations

Analysis of 20 observation signals indicates the following temporal patterns:

• Blacklist Activity: Recent listings observed on 2026-08-13 with high severity ratings across multiple threat feeds
• Infrastructure Classification: Consistently identified as Google Cloud hosting infrastructure
• Neighborhood Status: Subnet classification maintained as "clean" with 0 abuse density
• Threat Persistence: No evidence of persistent malicious activity

## Relationships & Correlations

The IP maintains DNS associations with the hostname 247.211.97.34.bc.googleusercontent.com and shares network infrastructure (GOOGL-2) with multiple related entities. No correlated malicious campaigns or certificate matches observed.

## Neighborhood Assessment

• Subnet: 34.97.211.247/24
• Abuse Density: 0
• Total Siblings: 1 active
• Threat Siblings: 0
• Classification: Clean

## Threat Indicators

Confirmed Indicators:

• Listed on 2 DNSBL entries with high severity
• Route instability detected (30-day route changes)
• Recent blacklist activity with high severity ratings

Absence of Indicators:

• Not Tor exit node
• Not known attacker
• Not spam source
• No known campaign associations

## Recommended Actions

Based on the risk profile of 50, the following firewall rules are recommended:

Note: These recommendations are probabilistic and should be combined with other threat intelligence signals before implementation.

## Analyst Assessment

This IP represents a Google Cloud hosting infrastructure with moderate risk characteristics. While the neighborhood shows no abuse density, the IP itself has been observed on 2 DNSBL lists with high severity. The route instability and recent blacklist activity warrant monitoring. Blocking is recommended based on current risk score of 50, particularly for environments that require stricter ingress filtering. The infrastructure type (CloudCompute) suggests legitimate hosting services, but the blacklist associations indicate potential misuse of this endpoint.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.