INTELLIGENCE BRIEFING: 34.23.109.128/32
SUBJECT: Threat Intelligence Assessment
DATE: 2026-08-13
CLASSIFICATION: Low Risk
EXECUTIVE SUMMARY
IP address 34.23.109.128 was classified as Low Risk with a risk score of 25. The address is associated with Google Cloud infrastructure located in North Charleston, South Carolina, United States. The subnet exhibits clean classification with zero abuse density.
INFRASTRUCTURE PROFILE
- Organization: Google LLC (ASN 396982)
- Network: GOOGL-2 (34.4.5.0/24)
- Geolocation: US, South Carolina, North Charleston
- Infrastructure Type: CloudCompute (Google Cloud)
- Connection Status: No services detected, firewalled/no services
- DNS Resolution: 128.109.23.34.bc.googleusercontent.com (googleusercontent.com)
THREAT INDICATORS
- Known Attacker: No
- Tor Exit Node: No
- Spam Source: No
- Blacklist Count: 0
- DNSBL Listings: 1 of 8 lists flagged
- Threat Persistence: 0 days observed
- Campaign Correlation: None detected
NEIGHBORHOOD ANALYSIS
Subnet 34.23.109.128/24 was analyzed with the following metrics:
- Abuse Density: 0 (clean)
- Active Siblings: 1
- Threat Siblings: 0
- Classification: Clean
OBSERVATION HISTORY
The IP generated 22 signal observations. Recent activity (2026-08-13) confirmed:
- Infrastructure consistently identified as Google Cloud
- Provider signals: Google LLC/Google Cloud
- Location variance observed: North Charleston and Moncks Corner, SC (within 25km accuracy radius)
- One conflicting signal flagged proxy/VPN type with 0.85 confidence
- Operator score: 0.3478 (Basic)
- DNSSEC: Valid
RELATIONSHIP MAPPING
16 relationships identified, including:
- Multiple same network associations (GOOGL-2)
- DNS associations to 128.109.23.34.bc.googleusercontent.com
- No external organization or certificate links
RECOMMENDED ACTIONS
No specific security actions or firewall rules were generated due to low-risk classification. The IP does not meet threshold criteria for blocking. Continue standard monitoring practices.
ASSESSMENT
The IP address 34.23.109.128 operates as legitimate Google Cloud infrastructure with minimal threat indicators. The low-risk score, clean subnet classification, and absence of known attacker indicators support continued traffic flow with standard logging. The single DNSBL listing warrants awareness but does not indicate malicious activity given the Google Cloud provider association.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 34.4.5.0/24 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 128.109.23.34.bc.googleusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 128.109.23.34.bc.googleusercontent.com |
π DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 15% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 21% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-07-30 17:12:06 UTC |
| Last Seen | 2026-08-13 01:00:53 UTC |
| Profile Built | 2026-08-13 01:24:47 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 31 |
Full dossier details are available via our API.