# IP Intelligence Briefing: 34.156.48.120/32
## Executive Summary
IP address 34.156.48.120 is identified as a Google Cloud Compute infrastructure resource with a low-risk profile (risk score: 25). The IP is associated with Google LLC (ASN 396982) and resides within the GOOGL-2 network block (34.128.0.0/10). No active threat indicators, blacklists, or malicious campaign associations were detected.
## Technical Profile
Ownership & Classification:
- Organization: Google LLC
- ASN: 396982
- Network: GOOGL-2
- Infrastructure Type: CloudCompute
- Classification: Cloud Hosting Provider
- Country: Belgium (BE)
- Region: Wallonia
- City: St. Ghislain
Network Role:
- Provider: Google Cloud
- Connection Type: Cloud infrastructure
- Service Purpose: Firewalled / No Services
- Anycast: No
- CDN: No
- VPN/Proxy: No
DNS Analysis:
- PTR Hostname: 120.48.156.34.bc.googleusercontent.com
- Forward Resolution: 120.48.156.34.bc.googleusercontent.com
- Email Authentication: SPF and DMARC records present
- Forward Resolution Count: 1
Open Services:
- Open Ports: None detected
- TLS Certificate: None
- HTTP Services: None
- Server Banner: None
## Threat Indicators
- Risk Score: 25 (Low Risk)
- Abuse Confidence Score: Not applicable
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- Blacklist Count: 0
- Pulsedive Risk: Not detected
- Known Campaigns: None
- Campaign Likelihood: None
## Temporal Analysis
Observation History:
- Total Observations: 23
- Threat Observation Count: 1
- Threat Persistence Days: 0
- Ownership Changes: 0
- Is Persistently Malicious: No
The IP has shown minimal signal changes over the observation period. Geolocation signals consistently point to St. Ghislain, Belgium, with multi-signal inference methods. Operator scores remain stable at 0.3478 (Basic classification).
## Subnet Neighborhood Analysis
Subnet: 34.156.48.120/24
- Abuse Density: 0 (Low)
- Classification: Mostly Clean
- Inherited Risk: 2
- Total Siblings: 1
- Active Siblings: 1
- Threat Siblings: 1
- Risk Distribution: No high-risk neighbors detected
## Relationship Graph
The IP exhibits 25 relationship connections, primarily consisting of:
- DNS Associations: Multiple entries for 120.48.156.34.bc.googleusercontent.com
- Network Associations: Multiple entries for GOOGL-2 network block
- No external organization or certificate relationships detected
## Security Recommendations
Based on the risk profile and observed signals, the following actions are recommended:
Immediate Actions:
- No immediate blocking or mitigation required
- IP classified as legitimate cloud infrastructure
Monitoring Recommendations:
- Continue standard monitoring for cloud infrastructure IPs
- No specific firewall rules required at this time
- Maintain awareness of Google Cloud infrastructure patterns
Contextual Notes:
This IP is part of Google's cloud infrastructure ecosystem and demonstrates typical characteristics of cloud-hosted resources. The absence of open ports, threat indicators, and malicious activity suggests this is a legitimate infrastructure endpoint. No immediate threat mitigation actions are warranted.
---
*Intelligence generated by IPDebrief Analysis Platform*
*Classification: SOC Intelligence Briefing*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 34.128.0.0/10 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | 120.48.156.34.bc.googleusercontent.com |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | 120.48.156.34.bc.googleusercontent.com |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting โ Infrastructure provider without advanced routing |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 15% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 26% | 1 | 3 |
| geolocation | 34% | 2 | 3 |
| Overall | 23% | 10 | 16 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-05-25 06:42:11 UTC |
| Last Seen | 2026-06-29 01:17:53 UTC |
| Profile Built | 2026-06-29 07:20:32 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 24 |
Full dossier details are available via our API.