34.156.189.82📋 Copy

# IP Intelligence Briefing: 34.156.189.82/32

## Executive Summary

IP 34.156.189.82 is a Google Cloud infrastructure address (ASN 396982, GOOGL-2) with an overall low-risk profile (risk score: 25). The IP resolves to Google user content infrastructure and exhibits mixed signal indicators, including recent blacklist listings and subnet-level threat activity.

## Ownership and Infrastructure

• Organization: Google LLC
• ASN: 396982 (GOOGL-2)
• CIDR Block: 34.128.0.0/10
• Infrastructure Type: CloudCompute (Google Cloud)
• Registration: ARIN, registration date not available
• Abuse Contact: Available via RDAP

## Geolocation and Network Role

• Reported Location: St. Ghislain, Belgium (WAL region)
• Coordinates: 50.45°N, 3.82°E
• Geo Consensus: Inconsistent across sources (geoConsensus: false, geoPlausible: true)
• Network Role: Provider, cloud infrastructure with firewalled/no services
• Anycast: No
• Mobile/Residential: No

## DNS and Resolution

• PTR Hostname: 82.189.156.34.bc.googleusercontent.com
• Forward Resolution: Confirmed, resolves to 82.189.156.34.bc.googleusercontent.com
• Domain: googleusercontent.com
• Email Authentication: SPF present, DMARC configured

## Service and Port Exposure

• Open Ports: None detected
• TLS Certificate: Not present
• HTTP Title/Server Banner: Not present
• Service Purpose: Firewalled / No Services
• Fingerprint: No HTTP headers or TLS indicators detected

## Threat Indicators

• Risk Score: 25 (Low Risk)
• Abuse Confidence Score: Not available
• Tor Exit: No
• Known Attacker: No
• Spam Source: No
• Blacklist Count: 0 (profile-level)
• Known Campaigns: None
• Threat Feeds: None

## Historical Signal Activity

Total of 23 observations recorded. Notable signals include:

• 2026-08-05: Threat indicator with pulse count of 2
• 2026-08-05: DNS blacklist listing with max severity "high" across 8 total lists (1 listing active)
• 2026-08-05: Subnet analysis showing abuse density of 1, classification "mostly_clean"
• 2026-08-05: Operator score: 0.3478 (Basic)
• 2026-08-05: ASN AS15169 (Google LLC) observed

## Neighborhood Analysis (34.156.189.0/24)

• Abuse Density: 0 (neighborhood response) / 1 (profile response) - conflicting
• Classification: Mostly clean
• Total Siblings: 1
• Active Siblings: 1
• Threat Siblings: 1
• High/Medium/Low Risk Neighbors: 0 each

## Relationship Graph

• Same Network: 18 relationships to GOOGL-2 network
• DNS Associations: Multiple entries pointing to 82.189.156.34.bc.googleusercontent.com
• Total Relationships: 19

## Control Plane and Routing

• BGP Prefix: 34.156.128.0/17
• RPKI State: Not available
• Route Stability: Not stable
• DNSSEC Valid: Yes
• CAA Records: Present
• DNSBL Listed: 1 list out of 8 total
• Operator Score: 0.3478 (Basic)

## Recommended Actions

No specific firewall rules or security recommendations were generated. The IP presents a low-risk profile with minimal actionable threat indicators.

## Intelligence Assessment

This IP address represents Google Cloud infrastructure with standard user content hosting characteristics. The primary concern is the presence of blacklist listings (max severity: high) observed in recent history. The subnet shows one active threat sibling, suggesting potential localized activity. Geolocation data shows inconsistency, which is common for cloud infrastructure.

Recommendation: Monitor but no immediate blocking required. The IP's Google Cloud origin and low risk score (25) suggest legitimate infrastructure use. Continue surveillance of subnet 34.156.189.0/24 for coordinated activity.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.