# IP Intelligence Briefing: 34.97.96.109/32
Classification: Cloud Infrastructure Endpoint โ Low Threat
Date: 2026-08-06
Risk Score: 40 (Moderate Risk)
Status: Active
---
## Executive Summary
IP 34.97.96.109 is a Google Cloud infrastructure endpoint operating within the Google LLC network (ASN 396982, GOOGL-2). The IP resides in Osaka, Japan and presents a low threat profile suitable for defensive operations. No malicious indicators or active threats were detected during comprehensive analysis.
---
## Technical Profile
Ownership & Network:
- Organization: Google LLC
- Network Block: 34.64.0.0/10 (ARIN)
- Netname: GOOGL-2
- Abuse Contact: google-cloud-compliance@google.com
Geolocation:
- Location: Osaka, Japan (JP)
- Coordinates: 34.69°N, 135.50°E
- Distance from Probed Location: 9,133.8 km
- Round-trip Time: Avg 184.6ms (Min 181ms)
- GeoValidation: Plausible (5 probes, consensus confirmed)
Network Role:
- Infrastructure Type: Cloud Provider (Google Cloud)
- Connection Type: Firewalled / No Services
- DNS Resolution: 109.96.97.34.bc.googleusercontent.com
- Reverse DNS: googleusercontent.com
---
## Threat Assessment
Threat Indicators:
- Blacklist Count: 0
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- Abuse Confidence Score: Not applicable
- Known Campaigns: None detected
DNSBL Status:
- Listed Count: 2 of 8 total lists
- Risk Classification: Clean
- Threat Feeds: No matches
Security Services:
- Open Ports: None detected
- TLS Certificates: None detected
- HTTP Services: None detected
- Email Auth: SPF and DMARC configured
---
## Subnet Analysis
Subnet: 34.97.96.0/24
- Abuse Density: 0 (Clean)
- Classification: Clean
- Total Siblings: 1
- Active Siblings: 0
- Threat Siblings: 0
The IP operates in a clean subnet with no neighboring addresses showing malicious activity.
---
## Historical Observations
Observation Count: 17 signals recorded
Most Recent: 2026-08-06 03:12:13 UTC
Key Historical Trends:
- Ownership Changes: 0 (Stable)
- Threat Persistence Days: 0
- Threat Observation Count: 0
- Is Persistently Malicious: No
Observation history confirms consistent ownership and no emergence of threat signals over the monitoring period.
---
## Relationships & Associations
DNS Associations: 109.96.97.34.bc.googleusercontent.com
Network Associations: GOOGL-2 (Google network)
The IP maintains multiple DNS associations to the same cloud endpoint hostname, consistent with Google Cloud infrastructure behavior.
---
## Recommended Actions
Security Posture:
- Action: No blocking required
- Classification: Trusted cloud infrastructure
- Recommendation: Allow traffic; monitor for behavioral anomalies
Firewall Rules: No restrictive rules recommended. The IP is a legitimate Google Cloud endpoint with no threat indicators.
---
## Intelligence Assessment
IP 34.97.96.109 represents standard Google Cloud infrastructure with no malicious activity detected. The moderate risk score (40) reflects the IP's classification as a cloud provider endpoint rather than malicious activity. All threat indicators are absent, the subnet is clean, and historical data shows consistent benign behavior.
Verdict: BENIGN โ Cloud infrastructure endpoint. No defensive action required.
---
Analyst Notes: This IP should be treated as trusted Google Cloud infrastructure. If traffic from this IP shows anomalous behavior (unusual ports, unexpected destinations, or high data volumes), investigate as a potential compromise of cloud infrastructure rather than a direct attack.
End of Briefing
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 34.64.0.0/10 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | 109.96.97.34.bc.googleusercontent.com |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | 109.96.97.34.bc.googleusercontent.com |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Single-Service Host |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
| SSH Version | SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18 |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 40% | 2 | 3 |
| routing | 17% | 1 | 1 |
| services | 24% | 2 | 2 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 35% | 2 | 3 |
| Overall | 28% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-08-01 16:33:40 UTC |
| Last Seen | 2026-08-13 03:01:02 UTC |
| Profile Built | 2026-08-13 03:15:38 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 21 |
Full dossier details are available via our API.