IPDebrief

34.97.96.109

IP Intelligence Dossier
Your IP: 216.73.216.5
{ } JSON ๐Ÿ”ง Full Actions API
๐Ÿค– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

# IP Intelligence Briefing: 34.97.96.109/32

Classification: Cloud Infrastructure Endpoint โ€” Low Threat

Date: 2026-08-06

Risk Score: 40 (Moderate Risk)

Status: Active

---

## Executive Summary

IP 34.97.96.109 is a Google Cloud infrastructure endpoint operating within the Google LLC network (ASN 396982, GOOGL-2). The IP resides in Osaka, Japan and presents a low threat profile suitable for defensive operations. No malicious indicators or active threats were detected during comprehensive analysis.

---

## Technical Profile

Ownership & Network:

Geolocation:

Network Role:

---

## Threat Assessment

Threat Indicators:

DNSBL Status:

Security Services:

---

## Subnet Analysis

Subnet: 34.97.96.0/24

The IP operates in a clean subnet with no neighboring addresses showing malicious activity.

---

## Historical Observations

Observation Count: 17 signals recorded

Most Recent: 2026-08-06 03:12:13 UTC

Key Historical Trends:

Observation history confirms consistent ownership and no emergence of threat signals over the monitoring period.

---

## Relationships & Associations

DNS Associations: 109.96.97.34.bc.googleusercontent.com

Network Associations: GOOGL-2 (Google network)

The IP maintains multiple DNS associations to the same cloud endpoint hostname, consistent with Google Cloud infrastructure behavior.

---

## Recommended Actions

Security Posture:

Firewall Rules: No restrictive rules recommended. The IP is a legitimate Google Cloud endpoint with no threat indicators.

---

## Intelligence Assessment

IP 34.97.96.109 represents standard Google Cloud infrastructure with no malicious activity detected. The moderate risk score (40) reflects the IP's classification as a cloud provider endpoint rather than malicious activity. All threat indicators are absent, the subnet is clean, and historical data shows consistent benign behavior.

Verdict: BENIGN โ€” Cloud infrastructure endpoint. No defensive action required.

---

Analyst Notes: This IP should be treated as trusted Google Cloud infrastructure. If traffic from this IP shows anomalous behavior (unusual ports, unexpected destinations, or high data volumes), investigate as a potential compromise of cloud infrastructure rather than a direct attack.

End of Briefing

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

๐ŸŒ Geolocation

Country๐Ÿ‡ฏ๐Ÿ‡ต Japan
Region27
CityOsaka
TimezoneAsia/Tokyo
Latitude34.69
Longitude135.50

๐Ÿข Ownership & Registration

OrganizationGoogle LLC
ASNAS396982
Network NameGOOGL-2
CIDR Block34.64.0.0/10
RIRARIN
CountryUnited States
Abuse ContactAvailable via RDAP

๐ŸŒ DNS Intelligence

PTR109.96.97.34.bc.googleusercontent.com
Forward ConfirmedYes โ€” FCrDNS verified
Forward Hostnames109.96.97.34.bc.googleusercontent.com

๐Ÿ” DNS Hygiene

Hygiene Score100% (Excellent)
SPFPresent
DMARCPresent
FCrDNSVerified
DNSSECValid
CAAPresent

โ˜๏ธ Network Classification

InfrastructureInfrastructure / Datacenter
Service PurposeSingle-Service Host
Network TierTier 3 โ€” Basic operator with some routing infrastructure
CloudHosting

๐Ÿ”Œ Services & Open Ports

PortServiceProtocolBanner
22sshtcp
Closed Ports25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned)
Serverโ€”
HTTP Titleโ€”
SSH VersionSSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18

๐Ÿ” TLS Certificate

๐Ÿ”’
No certificate
Issued by โ€”
N/A
SANsNone
Valid Fromโ€”
Valid Untilโ€”

๐ŸŽฏ Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
40%
23
routing
17%
11
services
24%
22
ownership
35%
23
reputation
17%
12
geolocation
35%
23
Overall28%1014
Coverage: 6/6 dimensions ยท Data sufficiency: sufficient
Data CoherenceConsistent (100%)
AttributionModerate (70%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

๐Ÿ“… Observation Timeline ๐Ÿ”„ Live

First Seen2026-08-01 16:33:40 UTC
Last Seen2026-08-13 03:01:02 UTC
Profile Built2026-08-13 03:15:38 UTC
Data FreshnessLive
Signal Types21
Total Observations21
๐Ÿ” 21 signal types ยท 21 observations collected
This report is generated from 21+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API ๐Ÿ”ง Actions API ๐Ÿ“ง Enterprise Access

โ„น๏ธ About This Report

All data shown is publicly available network metadata โ€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.