IPDebrief

34.97.231.137

IP Intelligence Dossier
Your IP: 216.73.216.5
{ } JSON ๐Ÿ”ง Full Actions API
๐Ÿค– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

# IPDEBRIEF INTELLIGENCE BRIEFING

Target: 34.97.231.137/32

Classification: Low Risk / Google Cloud Infrastructure

Date: 2026-07-29

---

## Executive Summary

IP 34.97.231.137 is a Google Cloud infrastructure endpoint with a low-risk profile (Risk Score: 25). The address is associated with Google LLC (ASN 396982) and resolves to Google's usercontent domain infrastructure. No active threat indicators were observed, though the IP is listed on 1 of 8 DNSBLs at high severity.

---

## Infrastructure Profile

AttributeValue
**Organization**Google LLC
**ASN**396982
**Network Block**34.64.0.0/10 (GOOGL-2)
**Geolocation**United States (NY)
**Risk Score**25 (Low)
**Reputation**Low Risk

DNS Resolution: 137.231.97.34.bc.googleusercontent.com (Forward resolution confirmed)

---

## Threat Assessment

Abuse Confidence: Not applicable (Google infrastructure)

---

## Temporal Analysis

Observation History (16 signals):

Route Stability: Route changes observed in past 30 days (isRouteStable: false)

---

## Neighborhood Analysis

Subnet: 34.97.231.137/24

No neighboring IPs in the immediate /24 block show elevated risk indicators.

---

## Recommended Actions

Risk-Based Recommendations: None (Risk Score: 25)

Note: While no immediate blocking is recommended due to the low-risk profile and association with legitimate Google Cloud infrastructure, the DNSBL listing warrants awareness. Monitor for any changes in behavior or reputation scores.

Firewall Rules: Not applicable (Google Cloud infrastructure typically requires allow-listing for legitimate traffic)

---

## Intelligence Conclusion

IP 34.97.231.137 represents standard Google Cloud infrastructure with no active threat indicators. The single DNSBL listing appears to be a historical or administrative flag rather than an active threat indicator. Recommended treatment: Monitor / Allow with logging. No immediate blocking action advised.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

๐ŸŒ Geolocation

Country๐Ÿ‡ฏ๐Ÿ‡ต Japan
Region27
CityOsaka
TimezoneAsia/Tokyo
Latitude34.69
Longitude135.50

๐Ÿข Ownership & Registration

OrganizationGoogle LLC
ASNAS396982
Network NameGOOGL-2
CIDR Block34.64.0.0/10
RIRARIN
CountryUnited States
Abuse ContactAvailable via RDAP

๐ŸŒ DNS Intelligence

PTR137.231.97.34.bc.googleusercontent.com
Forward ConfirmedYes โ€” FCrDNS verified
Forward Hostnames137.231.97.34.bc.googleusercontent.com

๐Ÿ” DNS Hygiene

Hygiene Score100% (Excellent)
SPF2/2 domains
DMARC2/2 domains
FCrDNSVerified
DNSSECValid
CAAPresent
Domains Checked2 domains

โ˜๏ธ Network Classification

InfrastructureInfrastructure / Datacenter
Service PurposeWeb Server
Network TierTier 3 โ€” Basic operator with some routing infrastructure
CloudHosting

๐Ÿ”Œ Services & Open Ports

PortServiceProtocolBanner
80httptcpโ€”
443httpstcpโ€”
22sshtcp
Closed Ports25, 3389, 8080, 8443 (3 open / 7 scanned)
Serverenvoy
HTTP Titleโ€”
SSH VersionSSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u10

๐Ÿ” TLS Certificate

๐Ÿ”’
CN=www.vm.com, O=Dis, L=Springfield, S=Denial, C=PL
Issued by CN=root
Self-signed: No
SANswww.vm.comvm.com*.vm.com
Valid From2024-11-28T14:24:00+00:00
Valid Until2034-11-26T14:24:00+00:00
TLS ProtocolTls13
Cipher SuiteTLS_AES_256_GCM_SHA384
Signature Algorithmsha256RSA
Validity Period3650 days
Serial Number01
ThumbprintD13928F7F79C6CB77733C50E4991ED00FA21AFED

๐ŸŽฏ Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
33%
24
routing
13%
11
services
30%
23
ownership
30%
23
reputation
28%
13
geolocation
32%
23
Overall27%1017
Coverage: 6/6 dimensions ยท Data sufficiency: sufficient
Data CoherenceMixed Signals (68%) โ€” 2 contradiction(s)
AttributionModerate (55%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid
โš  Geo sources disagree on country: JP, PL
โš  TLS certificate claims PL but primary geo says JP

๐Ÿ“… Observation Timeline ๐Ÿ”„ Live

First Seen2026-07-22 01:11:48 UTC
Last Seen2026-08-12 16:36:34 UTC
Profile Built2026-08-12 16:52:05 UTC
Data FreshnessLive
Signal Types25
Total Observations27
๐Ÿ” 25 signal types ยท 27 observations collected
This report is generated from 25+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API ๐Ÿ”ง Actions API ๐Ÿ“ง Enterprise Access

โ„น๏ธ About This Report

All data shown is publicly available network metadata โ€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.