34.38.105.20📋 Copy

# IP Intelligence Briefing: 34.38.105.20

Classification: Moderate Risk | Date: 2026-08-13

Analyst: IPDebrief Intelligence Team

## Executive Summary

IP address 34.38.105.20 registered to Google LLC (ASN 396982, netname GOOGL-2) presents a moderate risk profile with a score of 40. The address operates within Google Cloud infrastructure with geolocation data indicating Brussels, Belgium. No active threat indicators were detected during analysis, though the IP maintains presence on 2 of 8 DNS blacklists.

## Profile Characteristics

Ownership & Classification:

• Provider: Google LLC (ASN 396982)
• Network: 34.38.0.0/16 (GOOGL-2)
• Infrastructure Type: Cloud provider environment
• DNS: Resolves to 20.105.38.34.bc.googleusercontent.com

Geolocation Data:

• Country: Belgium (BE)
• City: Brussels
• Geo-Validation: Consensus confirmed across multiple sources; ICMP validation blocked

Threat Indicators:

• Blacklist Count: 0
• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Known Campaigns: None detected

Network Services:

• Open Ports: None detected
• Service Status: Firewalled / No Services
• DNSSEC: Valid
• CAA Records: Present

## Temporal Analysis

Historical observation data shows 20 signal observations collected during 2026-08-13. The IP demonstrates stable ownership with no recorded changes. Threat persistence metrics show zero persistent malicious activity. Traceroute analysis completed 30 hops to target, with no anomalies in routing path.

## Neighborhood Assessment

Subnet analysis for 34.38.105.0/24 reveals:

• Total Siblings: 0
• Abuse Density: 0
• Threat Siblings: 0
• High/Medium/Low Risk Neighbors: None detected

The IP exists in isolation within its /24 subnet with no neighboring addresses flagged for abuse.

## Relationship Graph

Seven relationships identified:

• DNS Associations: Multiple entries pointing to bc.googleusercontent.com
• Network Associations: GOOGL-2 network (34.38.0.0/16)

No external organization or certificate associations detected beyond Google infrastructure.

## Recommended Actions

Despite no specific threat indicators, the moderate risk score warrants standard defensive measures:

Firewall Recommendations:

• iptables: `iptables -A INPUT -s 34.38.105.20 -j DROP`
• nftables: `nft add rule inet filter input ip saddr 34.38.105.20 drop`
• Cloudflare WAF: Block with expression `ip.src eq 34.38.105.20`
• AWS WAF: Add `34.38.105.20/32` to blacklist

SOC Analyst Notes:

The IP presents a moderate risk profile (40/100) attributable to Google Cloud infrastructure. While no active malicious indicators were detected, the presence on DNS blacklists warrants monitoring. The address should be evaluated against organizational threat context—legitimate Google Cloud workloads may legitimately appear on certain blocklists. Correlation with other security signals recommended before implementing blocking rules.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.