# INTELLIGENCE BRIEFING: 34.26.210.172/32
Classification: Low Risk Infrastructure IP
Date: 2026-06-21
Analyst: IPDebrief Intelligence Team
---
## EXECUTIVE SUMMARY
IP address 34.26.210.172 is classified as Low Risk (Risk Score: 25/100) and represents Google Cloud infrastructure. The asset demonstrates legitimate cloud service characteristics with no observed malicious activity, threat indicators, or blacklist associations.
---
## TECHNICAL PROFILE
Ownership & Network:
- Organization: Google LLC (GOOGL-2)
- ASN: 396982
- CIDR Block: 34.4.5.0/24
- BGP Prefix: 34.26.0.0/16
- RIR: ARIN
Geolocation:
- Country: United States (US)
- Region: South Carolina (SC)
- City: Moncks Corner
- Coordinates: 33.21°N, -80.17°W
- Timezone: America/New_York
- Accuracy Radius: 150km
Network Role:
- Provider: Google Cloud
- Infrastructure Type: Cloud Infrastructure
- Connection Status: Firewalled / No Services
- Anycast: No
- Proxy/VPN: No
---
## THREAT ASSESSMENT
Risk Indicators:
- Risk Score: 25 (Low Risk)
- Abuse Confidence Score: Not Applicable
- Blacklist Count: 0
- Known Campaigns: None
- Is Known Attacker: False
- Is Spam Source: False
- Is Tor Exit: False
Control Plane:
- DNSSEC Valid: Yes
- CAA Records: Present
- RPKI State: Not Available
- IRR Consistency: Not Available
- Route Changes (30d): 0
- DNSBL Listed: 1/8 total lists
---
## NETWORK SERVICES
Open Ports: None detected
HTTP/TLS: No services detected
Certificate Authority: None
Banner Analysis: No banner information available
The IP shows no active services and appears firewalled, consistent with Google Cloud infrastructure patterns.
---
## DNS RESOLUTION
PTR Hostnames:
- 172.210.26.34.bc.googleusercontent.com
Forward Resolution: Confirmed
- Domain: googleusercontent.com
- Forward Hostnames: 172.210.26.34.bc.googleusercontent.com
DNS configuration is consistent with legitimate Google Cloud infrastructure.
---
## OBSERVATION HISTORY
Total Observations: 21
Observation Period: 2026-06-16 to 2026-06-21
Key Historical Findings:
- Most recent observation (2026-06-21): Basic classification with 60% confidence
- Subnet analysis (2026-06-16): Clean classification, 0 abuse density
- Ownership stability: No ownership changes detected
- Threat persistence: 0 days
- Persistently Malicious: False
The IP has maintained a stable, low-risk profile throughout the observation period with no escalation of threat signals.
---
## RELATIONSHIP ANALYSIS
DNS Associations:
- 172.210.26.34.bc.googleusercontent.com (repeated associations)
Network Associations:
- GOOGL-2 (repeated network associations)
No anomalous relationships or connections to third-party infrastructure detected. All relationships point to legitimate Google Cloud ecosystem.
---
## NEIGHBORHOOD ANALYSIS
Subnet: 34.26.210.0/24
- Abuse Density: 0%
- Classification: Clean
- Total Siblings: 1
- Active Siblings: 0
- Threat Siblings: 0
The /24 subnet demonstrates zero abuse density and no malicious neighbors, reinforcing the legitimacy of the target IP.
---
## SECURITY ACTIONS
Recommendations: None required
- Risk Profile indicates low threat level
- No firewall rules recommended
- No additional blocking actions advised
Justification: This IP represents legitimate Google Cloud infrastructure with no observed malicious activity, threat indicators, or abuse patterns. Standard operational monitoring is sufficient.
---
## GEOGRAPHIC VALIDATION
Validation Status: Flagged
- GeoPlausible: False
- Distance from Known Location: 6958km
- Minimum Possible RTT: 139.2ms
- Observed RTT: 34.0ms
- Minimum Observed RTT: 34.0ms
- Average RTT: 37.2ms
- Probe Count: 5
Note: RTT measurements indicate a geographic inconsistency. The observed RTT of 34ms is significantly below the minimum possible 139.2ms for the reported distance of 6958km. This suggests the geolocation data may be inferred rather than measured, which is common for cloud infrastructure IPs.
---
## INTELLIGENCE ASSESSMENT
34.26.210.172 is a legitimate Google Cloud infrastructure IP with no observed malicious activity. The low risk score (25), clean neighborhood classification, absence of threat indicators, and consistent DNS resolution to googleusercontent.com all support benign operation. No SOC alerting or blocking is recommended. Standard operational monitoring for Google Cloud infrastructure is appropriate.
---
END OF BRIEFING
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 34.4.5.0/24 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 172.210.26.34.bc.googleusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 172.210.26.34.bc.googleusercontent.com |
π DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
βοΈ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 24% | 2 | 2 |
| routing | 17% | 1 | 1 |
| services | 17% | 1 | 1 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 35% | 2 | 3 |
| Overall | 24% | 9 | 12 |
| Data Coherence | Mostly Consistent (80%) β 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-06-07 13:58:08 UTC |
| Last Seen | 2026-06-21 13:59:46 UTC |
| Profile Built | 2026-06-21 14:35:08 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 25 |
Full dossier details are available via our API.