34.156.83.104
INTELLIGENCE BRIEFING: 34.156.83.104/32
Classification: Moderate Risk — Cloud Infrastructure
Date: 2026-08-13
SUMMARY
IP address 34.156.83.104/32 is registered to Google LLC (ASN 396982) within the GOOGL-2 CIDR block (34.128.0.0/10). The IP is classified as cloud compute infrastructure with a risk score of 40 (Moderate Risk). Geolocation data indicates Belgium (St. Ghislain, BE) with consensus across multiple sources. The IP resolves to the hostname 104.83.156.34.bc.googleusercontent.com via PTR records.
THREAT INDICATORS
- Risk Score: 40/100
- Threat Indicators: None identified in current threat feeds
- Abuse Confidence: Not available
- Known Campaigns: None
- Blacklist Status: Listed on 2 of 8 DNSBLs
- Tor Exit Node: No
- Known Attacker: No
NETWORK CONTEXT
The IP operates within a /24 subnet (34.156.83.0/24) showing an abuse density of 0.3333 with 1 threat sibling and 2 low-risk neighbors (34.156.83.79 and 34.156.83.230, both with risk scores of 25). The subnet classification is "mostly_clean."
No open ports or active services were detected. The IP is configured as "Firewalled / No Services."
OBSERVATION HISTORY
22 total observations recorded. Most recent activity observed on 2026-08-13. Ownership and threat persistence metrics show 0 ownership changes and 0 threat observation days. Geo-validation encountered ICMP blocking but confirmed geo-plausible location with 236.8 km distance from expected origin.
RECOMMENDATIONS
Given the moderate risk profile and DNSBL listings, the following blocking rules are recommended:
- iptables: `iptables -A INPUT -s 34.156.83.104 -j DROP`
- nftables: `nft add rule inet filter input ip saddr 34.156.83.104 drop`
- nginx: `deny 34.156.83.104;`
- Cloudflare WAF: Block with expression `ip.src eq 34.156.83.104`
- AWS WAF: Address `34.156.83.104/32`
NOTE: These recommendations are probabilistic and should be combined with other signals before taking action. Given Google Cloud infrastructure classification, consider contextual analysis before implementing blocking rules to avoid disrupting legitimate traffic.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 34.128.0.0/10 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 104.83.156.34.bc.googleusercontent.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | 104.83.156.34.bc.googleusercontent.com |
🔐 DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 40% | 2 | 3 |
| routing | 17% | 1 | 1 |
| services | 24% | 2 | 2 |
| ownership | 35% | 2 | 3 |
| reputation | 21% | 1 | 2 |
| geolocation | 35% | 2 | 3 |
| Overall | 28% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-03 11:22:26 UTC |
| Last Seen | 2026-08-13 04:56:59 UTC |
| Profile Built | 2026-08-13 05:12:19 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 26 |
Full dossier details are available via our API.