# IP Intelligence Briefing: 34.136.134.112/32
Date: 2026-07-29
Classification: Low Risk β Google Cloud Infrastructure
Risk Score: 25/100
---
## Executive Summary
IP 34.136.134.112 is associated with Google Cloud infrastructure (Google LLC, ASN 396982) and presents low-risk characteristics. The address belongs to the GOOGL-2 network block (34.128.0.0/10) and demonstrates consistent legitimate service patterns. No threat indicators, malicious campaigns, or abuse patterns observed.
---
## Technical Profile
Ownership & Network:
- Organization: Google LLC
- ASN: 396982
- Network: GOOGL-2 (34.128.0.0/10)
- RIR: ARIN
- Network Role: Single-Service Host, Google Cloud Provider
Geolocation:
- Country: United States (US)
- Region: Iowa (IA)
- City: Council Bluffs
- Accuracy Radius: 200km
DNS Configuration:
- PTR Hostname: 112.134.136.34.bc.googleusercontent.com
- Forward Resolution: Confirmed
- Email Authentication: SPF enabled, DMARC configured
- DNSSEC: Valid
Services:
- Port 22 (TCP/SSH): Open (SSH-2.0-OpenSSH_10.0)
- No HTTP/TLS services detected
- Certificate: Not applicable
---
## Threat Assessment
Risk Indicators:
- Risk Score: 25 (Low Risk)
- Abuse Confidence Score: Not applicable
- Blacklist Count: 1 DNSBL listing
- Threat Feeds: None
- Known Campaigns: None
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
Control Plane:
- BGP Prefix: 34.136.128.0/20
- Route Stability: Not stable
- RPKI State: Not reported
- Operator Score: 0.3478
---
## Historical Observations
Observation Count: 18 signals recorded
Temporal Analysis:
- Most Recent Signal: 2026-07-29 20:21:26 UTC
- Signal Types: Geolocation, Ownership, DNS, Network Scanning
- Ownership Changes: 0 (stable)
- Threat Persistence Days: 0
- Persistently Malicious: False
Signal Consistency:
- Geolocation signals consistently identify Council Bluffs, IA
- Ownership consistently reports Google LLC
- No degradation or escalation in risk profile over observation period
---
## Relationship Graph
Identified Relationships (6 total):
- DNS Association: 112.134.136.34.bc.googleusercontent.com (multiple entries)
- Same Network: GOOGL-2 (Google LLC network)
External Correlations:
- No certificate associations
- No correlated IP addresses
- No campaign matches
- No banner matches
---
## Neighborhood Analysis
Subnet: 34.136.134.0/24
Abuse Density: 0 (Clean)
Classification: Clean
Neighbor Analysis:
- Total Siblings: 2
- Active Siblings: 1
- Threat Siblings: 0
Neighbor IP: 34.136.134.237
- Risk Score: 25
- Authority Score: 90
- Classification: Low Risk
---
## Recommended Actions
For SOC Operations:
- No blocking recommended (legitimate cloud infrastructure)
- Monitor for unexpected behavior patterns
- Allow standard Google Cloud service traffic
- No firewall rules required
For Network Security:
- Whitelist or allow-list for cloud service traffic
- Monitor SSH connections (port 22) for unauthorized access attempts
- No additional mitigation required
---
## Conclusion
IP 34.136.134.112 is a legitimate Google Cloud infrastructure address with low-risk characteristics. The IP demonstrates stable ownership, consistent geolocation signals, and no threat indicators. The presence of SSH is consistent with cloud infrastructure management requirements. No defensive action required beyond standard cloud provider traffic handling.
Recommendation: Allow traffic. Monitor as expected cloud infrastructure activity.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 34.128.0.0/10 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 112.134.136.34.bc.googleusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 112.134.136.34.bc.googleusercontent.com |
π DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
| SSH Version | SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u10 |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 37% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 21% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 27% | 2 | 2 |
| Overall | 24% | 10 | 13 |
| Data Coherence | Mostly Consistent (80%) β 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-07-23 20:05:50 UTC |
| Last Seen | 2026-08-12 18:02:32 UTC |
| Profile Built | 2026-08-12 18:10:24 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 25 |
Full dossier details are available via our API.