# IP Intelligence Briefing: 34.176.126.191
Classification: Low Risk β Google Cloud Infrastructure
Report Date: 2026-06-21
Analyst: IPDebrief Intelligence Team
---
## Executive Summary
IP 34.176.126.191 is a low-risk Google Cloud infrastructure address with no active threat indicators. The IP belongs to Google LLC (ASN 396982) within the GOOGL-2 CIDR block (34.128.0.0/10). No open services are detected, and the address shows stable cloud infrastructure characteristics consistent with legitimate Google Cloud operations.
---
## Threat Assessment
| Metric | Value | Assessment |
|---|---|---|
| Risk Score | 25/100 | Low |
| Reputation | Low Risk | Clean |
| Abuse Confidence | N/A | Not applicable |
| Blacklist Count | 0 | No listings |
| DNSBL Listed | 1/8 | Minimal |
| Known Campaigns | 0 | None detected |
Key Findings:
- No known attacker indicators
- Not classified as a spam source or Tor exit node
- No active threat feed matches
- Control plane shows route stability (isRouteStable: true)
- BGP prefix: 34.176.112.0/20 with stable routing
---
## Infrastructure Profile
Organization: Google LLC
ASN: 396982 (GOOGL-2)
Network: 34.128.0.0/10 (ARIN)
Geolocation: United States (Santiago Metropolitan region)
Infrastructure Type: CloudCompute
Service Purpose: Firewalled / No Services
DNS Configuration:
- PTR Hostname: 191.126.176.34.bc.googleusercontent.com
- Forward Resolution: Confirmed
- SPF Record: Present
- DMARC Record: Present
---
## Network Neighborhood Analysis
Subnet: 34.176.126.191/24
Abuse Density: 1
Classification: mostly_clean
Threat Siblings: 1
Active Siblings: 0
The surrounding /24 subnet shows minimal abuse activity with a single threat sibling detected. The target IP inherits a risk score of 2 from its neighborhood context.
---
## Temporal Analysis
Control Plane Indicators:
- BGP Age: 2862 days (registered 2018-08-15)
- Route Changes (30d): 0
- RPKI State: Validated
- DNSSEC Valid: true
Historical Observations (28 total):
- Recent classification (2026-06-21): Cloud infrastructure with high confidence (0.90)
- Operator score: 0.5652 (Moderate)
- Ownership stability: No changes detected
- Threat persistence: 0 days
---
## Services & Open Ports
- Open Ports: None detected
- TLS Certificate: Not present
- HTTP Service: Not active
- Server Banner: N/A
The IP is properly firewalled with no exposed services, consistent with backend Google Cloud infrastructure.
---
## Relationship Graph
Total Relationships: 27
- DNS Associations: Multiple entries to 191.126.176.34.bc.googleusercontent.com
- Network Associations: Multiple entries to GOOGL-2 network
All relationships are benign DNS and network-level associations consistent with Google Cloud infrastructure operations.
---
## Recommended Actions
Security Recommendations: None required
Firewall Rules: Not applicable
Threat Response: Monitor as background traffic
Actionable Guidance:
- No blocking recommended
- No alerting required
- Traffic from this IP should be permitted as legitimate cloud infrastructure
- Monitor for any behavioral changes in future observations
---
## Conclusion
IP 34.176.126.191 presents no security concerns. The address is a legitimate Google Cloud infrastructure endpoint with proper security controls (firewalled, no open services). No defensive actions are required beyond standard network monitoring. The IP's clean reputation, stable routing, and absence of threat indicators support continued normal operation.
Priority: Low β No action required
Confidence Level: High β Based on comprehensive multi-signal analysis
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 34.128.0.0/10 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 191.126.176.34.bc.googleusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 191.126.176.34.bc.googleusercontent.com |
π DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting β Infrastructure provider without advanced routing |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 4 |
| routing | 24% | 2 | 3 |
| services | 15% | 2 | 2 |
| ownership | 35% | 3 | 5 |
| reputation | 22% | 1 | 3 |
| geolocation | 27% | 2 | 3 |
| Overall | 25% | 12 | 20 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-05-27 19:22:35 UTC |
| Last Seen | 2026-06-29 04:43:40 UTC |
| Profile Built | 2026-06-29 04:58:16 UTC |
| Data Freshness | Live |
| Signal Types | 27 |
| Total Observations | 29 |
Full dossier details are available via our API.