34.120.24.208
IP Intelligence Briefing: 34.120.24.208/32
Risk Assessment
The target IP registered a Low Risk reputation score of 25. Despite the low risk classification, the system flagged the address as a Suspicious Host due to high-profile signal inconsistencies.
Ownership and Infrastructure
Registry data identifies the address as belonging to Google LLC (ASN 396982, Netname GOOGL-2). The infrastructure is classified as Google Cloud hosting web server services.
Technical Profile
Scans confirmed open ports 80 (HTTP) and 443 (HTTPS). TLS certificates were issued by Sectigo for `*.di.atlas.samsung.com`. HTTP probes returned a 404 status code. DNS resolution confirmed the hostname `208.24.120.34.bc.googleusercontent.com`.
Observations and Anomalies
Three contradictions compromised the profile's coherence:
1. Geographic data lists the US (Kansas City, MO), while the TLS certificate claims a Korean origin (Gyeonggi-do).
2. Geo validation measurements indicated a distance of 7328km with an average RTT of 22.6ms, violating physics minimums for that distance.
3. Geographic sources disagreed on the country of origin.
Operational Recommendation
Due to multiple signal contradictions and an unreliable profile, the recommended action is to Rate-Limit traffic.
* Severity: Medium
* Justification: Unreliable profile data and significant signal contradictions.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 34.64.0.0/10 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 208.24.120.34.bc.googleusercontent.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | 208.24.120.34.bc.googleusercontent.com |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | 3/3 domains |
| DMARC | 3/3 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Present |
| Domains Checked | 3 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.di.atlas.samsung.comdi.atlas.samsung.com |
| Valid From | 2026-03-18T00:00:00+00:00 |
| Valid Until | 2026-10-02T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 198 days |
| Serial Number | 21B348C2A338BA9C3441C6782B0DD2BF |
| Thumbprint | B55431E914F36F0C2B507FF3D74801152376ED2D |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 27% | 2 | 3 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 22% | 10 | 15 |
| Data Coherence | Contradictory (48%) — 3 contradiction(s) |
| Attribution | Low (40%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ Geo sources disagree on country: KR, US
⚠ TLS certificate claims KR but primary geo says US
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-17 03:51:18 UTC |
| Last Seen | 2026-09-25 09:52:46 UTC |
| Profile Built | 2026-09-25 10:09:11 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 35 |
Full dossier details are available via our API.