# IP Intelligence Briefing: 34.154.32.105
Classification: Low Risk / Google Cloud Infrastructure
Date: Current
Risk Score: 25/100
---
## Executive Summary
IP 34.154.32.105 is identified as Google Cloud infrastructure with a low-risk profile. The IP operates within Google's /10 CIDR block (34.128.0.0/10), associated with organization GOOGL-2. No malicious indicators, threat campaigns, or blacklist associations were detected. The IP exhibits clean neighborhood characteristics with zero abuse density in its /24 subnet.
---
## Technical Profile
Ownership:
- Organization: Google LLC
- ASN: 396982
- Network: GOOGL-2
- CIDR Block: 34.128.0.0/10
- RIR: ARIN
- Abuse Contact: Available via RDAP
Geolocation:
- Primary Location: Milan, Italy (LOM region)
- Coordinates: 45.46°N, 9.19°E
- Geo Source Consensus: True
- Accuracy Radius: 150 km
Network Services:
- Open Ports: None detected
- Infrastructure Type: Unknown
- Connection Status: Firewalled / No Services
- Cloud Provider: Google Cloud
- Anycast: No
DNS Resolution:
- PTR Hostname: 105.32.154.34.bc.googleusercontent.com
- Forward Resolution: Confirmed
- Hosted Domain: googleusercontent.com
- Email Authentication: SPF and DMARC configured
---
## Threat Assessment
Threat Indicators: None detected
- Blacklist Count: 0
- Abuse Confidence Score: N/A
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- Known Campaigns: None
Control Plane Analysis:
- BGP Prefix: 34.154.0.0/17
- Route Stability: False
- MoAS: No
- DNSBL Listed: 1/8 lists
- Operator Score: 0.3478 (Basic)
- DNSSEC Valid: Yes
---
## Neighborhood Analysis
Subnet: 34.154.32.0/24
- Abuse Density: 0.0
- Classification: Clean
- Total Siblings: 1
- Active Siblings: 0
- Threat Siblings: 0
The /24 neighborhood exhibits no abuse indicators, supporting the conclusion that this IP operates within a clean Google Cloud infrastructure environment.
---
## Historical Observations
Total Observations: 19 signals captured
Key Historical Notes:
- Ownership changes: 0
- Threat observation count: 0
- Persistently malicious: No
- Recent observations indicate stable infrastructure behavior
- Geo validation shows ICMP blocking (common for cloud infrastructure)
- Multiple signal sources confirm Google ownership
---
## Relationships
Connected Entities:
- DNS Associations: 105.32.154.34.bc.googleusercontent.com (multiple)
- Network Associations: GOOGL-2 (same network)
---
## Recommended Actions
Based on the low-risk profile and Google Cloud infrastructure classification:
1. Allow Traffic: No blocking recommended for legitimate business traffic
2. Monitoring: Standard cloud provider traffic monitoring
3. Firewall Rules: No specific restrictions required
4. Threat Intelligence: No additional threat intelligence correlation needed
---
## Intelligence Narrative
The IP address 34.154.32.105 represents legitimate Google Cloud infrastructure with no evidence of malicious activity. The IP resolves to googleusercontent.com, indicating usage for content delivery or web services. Geographic indicators point to Milan, Italy, though some signals reference US coordinatesโthis discrepancy is typical for distributed cloud infrastructure. The IP exhibits clean operational characteristics with zero blacklist associations, no open ports, and a clean neighborhood environment. Security teams should classify this IP as low-risk and treat traffic appropriately without special restrictions.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 34.128.0.0/10 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | 105.32.154.34.bc.googleusercontent.com |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | 105.32.154.34.bc.googleusercontent.com |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 2 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 15% | 1 | 2 |
| geolocation | 30% | 2 | 3 |
| Overall | 22% | 10 | 13 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-07-21 12:55:26 UTC |
| Last Seen | 2026-08-12 15:56:20 UTC |
| Profile Built | 2026-08-12 16:07:33 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 23 |
Full dossier details are available via our API.