34.120.157.206
IP 34.120.157.206 was identified as a Google Cloud infrastructure asset associated with Google LLC (ASN 396982). Network scanning revealed open HTTP and HTTPS ports operating under a Google Frontend banner. A TLS certificate issued by Google Trust Services was observed, encompassing multiple subject alternative names, including spc.attackofthefanboy.com and spc.destructoid.com. The address received a low risk score of 25 and was not classified as a known attacker, yet it was flagged as a suspicious host. Geolocation data indicated a contradiction between the claimed Kansas City origin and RTT physics measurements. No active attack indicators were present in the observation history. Recommendations indicate monitoring the asset for potential configuration changes or behavioral anomalies.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 34.64.0.0/10 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 206.157.120.34.bc.googleusercontent.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | 206.157.120.34.bc.googleusercontent.com |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | 16/22 domains |
| DMARC | 10/22 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Present |
| Domains Checked | 22 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | Google Frontend |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | spc.attackofthefanboy.comspc.bloxinformer.comspc.destructoid.comspc.divers.ggspc.fandomfire.comspc.fruityblox.comspc.gamepur.comspc.gamerjournalist.comspc.gameskinny.comspc.gamurs.group |
| Valid From | 2026-07-21T05:35:04+00:00 |
| Valid Until | 2026-10-19T06:29:36+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 90 days |
| Serial Number | 00D77E1E683A4CF7DF09B16C1A6A51BD14 |
| Thumbprint | A528745B130A798D483129CCCEA3CB8E4438DFF0 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 38% | 2 | 5 |
| routing | 13% | 1 | 1 |
| services | 38% | 2 | 5 |
| ownership | 27% | 2 | 3 |
| reputation | 22% | 1 | 3 |
| geolocation | 27% | 2 | 4 |
| Overall | 27% | 10 | 21 |
| Data Coherence | Mixed Signals (65%) — 2 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ High authority score (90) but appears on threat lists (risk 70)
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-31 06:54:38 UTC |
| Last Seen | 2026-09-19 19:58:32 UTC |
| Profile Built | 2026-09-23 11:02:51 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 55 |
Full dossier details are available via our API.