# IP Intelligence Briefing: 34.20.156.228/32
## Executive Summary
IP address 34.20.156.228 is classified as LOW RISK with an overall risk score of 25. The address belongs to Google LLC infrastructure operating within the GOOGL-2 network block. No malicious activity or threat indicators were detected across all observed signals.
## Ownership and Network Classification
- Organization: Google LLC (ASN: 396982)
- Network Name: GOOGL-2
- CIDR Block: 34.4.5.0/24
- Network Role: Google Cloud infrastructure
- Registration: ARIN registry
- DNS Resolution: 228.156.20.34.bc.googleusercontent.com
## Geolocation
- Country: United States (US)
- Region: California (CA)
- City: Los Angeles
- Coordinates: 33.94°N, 118.41°W
- Timezone: America/Los_Angeles
- Geo-Validation: Plausible; ICMP blocked during probe (150km accuracy radius)
## Threat Intelligence Assessment
- Risk Score: 25 (Low)
- Abuse Confidence Score: Not applicable
- Blacklist Count: 0
- Known Attacker: False
- Spam Source: False
- Tor Exit Node: False
- Known Campaigns: None identified
## Network Services and Ports
- Open Ports: None detected
- HTTP Services: Not accessible
- TLS Certificates: None observed
- Service Purpose: Firewalled / No services exposed
- Network Classification: Cloud infrastructure (Google Cloud)
## Neighborhood Analysis (34.20.156.0/24)
- Abuse Density: 0%
- Classification: Clean
- Total Siblings: 1
- Active Siblings: 0
- Threat Siblings: 0
- Risk Distribution: No high, medium, or low-risk neighbors detected
## Observation History
- Total Observations: 17 signals
- Last Observed: 2026-08-06
- Ownership Changes: 0
- Threat Persistence: No persistent malicious activity detected
- Stability: Stable ownership with no recent changes
- Signal Types: Geographic inference, DNS resolution, ownership verification, network classification
## Relationship Graph
- DNS Associations: 228.156.20.34.bc.googleusercontent.com (repeated entries)
- Network Associations: GOOGL-2 (same network classification)
- No Cross-Entity Links: No connections to external organizations, certificates, or subdomains
## Recommended Security Actions
- Risk Level: 25 (Low)
- Recommended Actions: None
- Firewall Rules: Not required
- Disposition: Allow traffic; no blocking recommended
## Intelligence Narrative
34.20.156.228 is a Google Cloud infrastructure IP address with no adverse threat indicators. The address resolves to a Google-owned domain (googleusercontent.com) and operates within a clean subnet showing zero abuse density. Historical observations confirm stable ownership under Google LLC with no evidence of malicious activity. The IP exhibits typical characteristics of legitimate cloud infrastructure with no open ports or exposed services. SOC analysts may allow this address without additional scrutiny, though standard network monitoring practices should continue to apply.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 34.4.5.0/24 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 228.156.20.34.bc.googleusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 228.156.20.34.bc.googleusercontent.com |
π DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 24% | 2 | 2 |
| routing | 17% | 1 | 1 |
| services | 24% | 2 | 2 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 35% | 2 | 3 |
| Overall | 25% | 10 | 13 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-08-01 16:33:39 UTC |
| Last Seen | 2026-08-13 02:53:10 UTC |
| Profile Built | 2026-08-13 03:05:38 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 21 |
Full dossier details are available via our API.