# IP Intelligence Briefing: 34.78.156.204/32
## Executive Summary
IP 34.78.156.204 is a Google Cloud infrastructure address with moderate risk classification (Score: 65). The IP is properly registered under Google LLC (ASN: 396982, Network: GOOGL-2) and resolves to Google Cloud hostnames. No active threat indicators were observed, and the subnet maintains a clean classification with zero abuse density.
## Ownership and Infrastructure
- Organization: Google LLC
- ASN: 396982 (GOOGL-2)
- CIDR Block: 34.64.0.0/10
- Network Role: Google Cloud Provider
- Infrastructure Type: Cloud-based infrastructure
- Registration: ARIN registry
## Geolocation
- Country: Belgium (BE)
- City: Brussels
- Region: Brussels Capital
- Accuracy Radius: 2500km
- Geo Validation: Plausible (ICMP blocked, unable to validate)
## DNS Analysis
- PTR Hostname: 204.156.78.34.bc.googleusercontent.com
- Forward Resolution: Confirmed
- Email Authentication: SPF and DMARC records present
- Certificate Authority Records: Present (CAA)
- DNSSEC: Valid
- DNSBL Status: Listed on 3 of 8 total lists
## Network Services and Ports
- Open Ports: None detected
- Service Status: Firewalled / No Services
- TLS Certificate: Not available
- HTTP Title: Not available
- Server Banner: Not available
## Threat Indicators
- Risk Score: 65 (Moderate Risk)
- Abuse Confidence Score: Not available
- Blacklist Count: 0
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- Known Campaigns: None
- Campaign Likelihood: None
## Control Plane Analysis
- BGP Prefix: 34.78.144.0/20
- Route Stability: Unstable
- MOAS: No
- RPKI State: Not available
- IRR Consistency: Not available
- Operator Score: 0.3478 (Basic)
- DNSSEC Valid: Yes
- Has CAA: Yes
- Route Changes (30d): 0
## Neighborhood Assessment
- Subnet: 34.78.156.204/24
- Abuse Density: 0
- Classification: Clean
- Total Siblings: 1
- Active Siblings: 1
- Threat Siblings: 0
- High Risk Neighbors: 0
- Medium Risk Neighbors: 0
- Low Risk Neighbors: 0
## Observation History (22 Observations)
Recent observations from August 2026 indicate:
- Subnet classification: Clean (0 abuse density)
- Operator score: 0.3478 (Basic)
- No persistent malicious activity
- No threat persistence days recorded
- Average ownership duration: Not available
## Related Entities
DNS Associations: 204.156.78.34.bc.googleusercontent.com (Multiple entries)
Network Relationships: GOOGL-2 (Same Network - Multiple entries)
## Recommended Security Actions
No specific firewall rules or security actions were generated based on the current risk profile. The IP is classified as Google Cloud infrastructure with no active threat indicators.
## Intelligence Assessment
IP 34.78.156.204 operates as legitimate Google Cloud infrastructure with standard operational characteristics. The moderate risk score of 65 is consistent with cloud provider addresses that may appear on some DNSBLs due to legitimate traffic patterns. No malicious activity, attack patterns, or threat indicators were observed. The subnet maintains a clean classification with zero abuse density and no threat-related neighboring IPs.
Classification: Legitimate Cloud Infrastructure
Recommended Action: Monitor as normal Google Cloud traffic
Threat Level: Low
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 34.64.0.0/10 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | 204.156.78.34.bc.googleusercontent.com |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | 204.156.78.34.bc.googleusercontent.com |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Single-Service Host |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 37% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 21% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 24% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-07-27 09:39:29 UTC |
| Last Seen | 2026-08-12 21:28:24 UTC |
| Profile Built | 2026-08-12 21:41:16 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 22 |
Full dossier details are available via our API.