34.138.115.95📋 Copy

# Intelligence Briefing: 34.138.115.95/32

Classification: Moderate Risk - Cloud Infrastructure

Report Date: August 2026

---

## Executive Summary

IP address 34.138.115.95 is identified as Google Cloud (GOOGL-2) infrastructure located in Moncks Corner, South Carolina. The IP presents a moderate risk profile (score: 55/100) with no active threat indicators. The subnet is classified as clean with zero abuse density, though the single neighbor IP (34.138.115.54) shows high authority scores.

---

## Technical Profile

Ownership & Classification:

• Organization: Google LLC (AS396982)
• Network: GOOGL-2 (34.128.0.0/10)
• Provider: Google Cloud
• Geolocation: Moncks Corner, SC, US (33.21°N, -80.17°W)

Network Characteristics:

• Connection Type: Firewalled / No Services
• Open Ports: None detected
• DNS Resolution: 95.115.138.34.bc.googleusercontent.com
• PTR Record: 95.115.138.34.bc.googleusercontent.com
• Email Authentication: SPF and DMARC records present

Security Posture:

• Threat Indicators: None (not Tor exit, not known attacker, not spam source)
• Blacklist Status: 0 blacklists; 3 DNSBL listings out of 8 total
• Known Campaigns: None
• Reputation: Moderate Risk (55/100)

---

## Neighborhood Analysis

Subnet: 34.138.115.0/24

• Abuse Density: 0 (Clean)
• Total Siblings: 2
• Active Siblings: 2
• Threat Siblings: 0

Neighbor Assessment:

The subnet demonstrates normal Google Cloud infrastructure behavior with no correlated threat activity.

---

## Historical Trend Analysis

Observation History (22 signals tracked):

• Latest Observation: 2026-08-05
• Ownership Stability: Stable (0 ownership changes)
• Threat Persistence: None detected
• Subnet Classification: Consistently "clean"
• Routing Stability: Route changes within 30-day window: 0

The IP has maintained consistent Google Cloud ownership and clean subnet classification throughout the observation period. No degradation in reputation or emergence of threat activity observed.

---

## Relationship Graph

Associated Entities:

• DNS Associations: Multiple hostnames resolving to 95.115.138.34.bc.googleusercontent.com
• Network Relationships: GOOGL-2 network (34.128.0.0/10)
• Certificate Matches: 0
• Correlated IPs: 0

All relationships point to legitimate Google Cloud infrastructure with no adversarial connections.

---

## Recommended Actions

Risk-Based Recommendations:

Firewall Rule Implementations:

```bash

# iptables

iptables -A INPUT -s 34.138.115.95 -j DROP

# nftables

nft add rule inet filter input ip saddr 34.138.115.95 drop

# nginx

deny 34.138.115.95;

# pfSense

pass quick proto tcp from 34.138.115.95 to any port 80,443

# Cloudflare WAF

{"description":"Block 34.138.115.95 — IPDebrief risk score 55","action":"block","filter":{"expression":"ip.src eq 34.138.115.95"}}

# AWS WAF

{"Addresses":["34.138.115.95/32"],"Description":"IPDebrief risk 55"}

```

Analysis Note: While the IP carries a moderate risk score (55/100), it is Google Cloud infrastructure with no open services. Blocking may be appropriate if this IP was observed in suspicious contexts, but the lack of threat indicators suggests it may be legitimate cloud traffic.

---

## Intelligence Assessment

Primary Findings:

1. Legitimate Google Cloud infrastructure endpoint

2. No active threat indicators or malicious behavior detected

3. Clean neighborhood with zero abuse density

4. Stable ownership and routing characteristics

Confidence Level: High

Threat Likelihood: None (Campaign likelihood: none)

SOC Analyst Guidance: Monitor for context-based anomalies rather than blanket blocking. If observed in suspicious traffic patterns, correlate with other signals before applying firewall rules.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.