34.150.234.117
IP INTELLIGENCE BRIEFING: 34.150.234.117/32
Target Profile
- IP Address: 34.150.234.117
- Organization: Google LLC (ASN 396982)
- Network: GOOGL-2 (34.128.0.0/10)
- Infrastructure: Google Cloud (CloudCompute)
- Location: Ashburn, Virginia, US
- Risk Score: 40 (Moderate Risk)
Threat Assessment
The IP is classified as Google Cloud infrastructure with no known malicious threat indicators. The IP is not identified as a Tor exit node, known attacker, or spam source. No threat campaigns or correlated IPs were detected. The subnet (34.150.234.117/24) demonstrates clean abuse density with zero sibling IPs flagged for high or medium risk.
Technical Observations
- DNS Resolution: 117.234.150.34.bc.googleusercontent.com
- Open Services: TCP/443 (HTTPS)
- TLS Certificate: Certificate issued for Kubernetes infrastructure (kubernetes.default, kubernetes.default.svc)
- DNS Records: SPF and DMARC records present on associated domain (googleusercontent.com)
- DNSBL Status: Listed on 2 of 8 threat feeds
Historical Activity
Observation history indicates 27 signal observations with recent activity showing Kubernetes-related DNS patterns (cluster.local, default.svc, kubernetes.default). The IP maintains consistent DNS associations to googleusercontent.com infrastructure. No persistent malicious behavior detected.
Relationship Mapping
Primary relationships include DNS associations to 117.234.150.34.bc.googleusercontent.com and network-level relationships to GOOGL-2. No external organizational connections or certificate cross-references beyond Google Cloud infrastructure.
Recommended Actions
Based on the moderate risk profile and Google Cloud infrastructure classification:
- Monitor for anomalous traffic patterns
- Standard logging recommended for cloud infrastructure
- No immediate block recommended; IP appears to be legitimate Google Cloud compute infrastructure
Contextual Note: This IP is part of Google's public cloud infrastructure. The Kubernetes-related certificates and DNS patterns are consistent with Google Cloud Platform workloads. The DNSBL listings may represent false positives or legitimate security filtering practices.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 34.128.0.0/10 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 117.234.150.34.bc.googleusercontent.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | 117.234.150.34.bc.googleusercontent.com |
🔐 DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | 1/4 domains |
| DMARC | 1/4 domains |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
| Domains Checked | 4 domains |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 32% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 32% | 2 | 3 |
| ownership | 27% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 35% | 2 | 3 |
| Overall | 26% | 10 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-22 19:33:01 UTC |
| Last Seen | 2026-08-12 17:10:45 UTC |
| Profile Built | 2026-08-12 17:22:14 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 28 |
Full dossier details are available via our API.