# IP Intelligence Briefing: 34.89.133.228/32
## Executive Summary
IP address 34.89.133.228 is classified as Low Risk with a risk score of 25/100. The address is associated with Google Cloud infrastructure (GOOGL-2, AS396982) and exhibits no malicious indicators. No immediate blocking or defensive action is recommended.
## Technical Profile
| Attribute | Value |
|---|---|
| Organization | Google LLC |
| ASN | 396982 |
| CIDR Block | 34.64.0.0/10 |
| Geolocation | Frankfurt, DE (primary consensus) |
| DNS Resolution | 228.133.89.34.bc.googleusercontent.com |
| Network Classification | Firewalled / No Services |
| Risk Score | 25 |
| Provider Score | 0 |
| Authority Score | 0 |
## Threat Indicators
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- Blacklist Count: 0
- Threat Feeds: None detected
- Campaign Association: None identified
## Observed Behavior
- Open Ports: None detected
- TLS Certificate: None
- HTTP Title: None
- Service Banner: None
- DNSSEC Valid: Yes
- Has CAA Record: Yes
- DNSBL Listed: 1/8 total lists (data artifact likely)
## Neighborhood Analysis
- Subnet: 34.89.133.228/24
- Abuse Density: 0%
- Total Siblings: 0
- Threat Siblings: 0
- Classification: Low risk subnet
## Historical Analysis
- Total Observations: 16 signals
- Ownership Changes: 0 (stable)
- Threat Persistence Days: 0
- Observation Trend: Consistent ownership by Google LLC
- Geolocation Signals: Mixed (Frankfurt, DE and US datacenters)
- Last Activity: 2026-07-30
## Relationship Graph
- DNS Associations: 228.133.89.34.bc.googleusercontent.com (3 entries)
- Network Association: GOOGL-2 (4 entries)
- No External Correlations: No links to external campaigns or related IPs
## Recommended Actions
No defensive actions required. The IP represents legitimate Google Cloud infrastructure with no threat indicators. Standard monitoring is appropriate.
Firewall Rules: Not Required
No blocking rules recommended based on current risk profile.
---
Assessment: This is a legitimate cloud infrastructure IP from Google with low-risk characteristics. The absence of open ports and services indicates proper security controls. The IP is suitable for routine traffic with no special handling required.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 34.64.0.0/10 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | 228.133.89.34.bc.googleusercontent.com |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | 228.133.89.34.bc.googleusercontent.com |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 31% | 2 | 4 |
| routing | 27% | 2 | 3 |
| services | 19% | 2 | 2 |
| ownership | 32% | 3 | 4 |
| reputation | 28% | 1 | 3 |
| geolocation | 13% | 1 | 1 |
| Overall | 25% | 11 | 17 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-07-25 08:45:28 UTC |
| Last Seen | 2026-08-12 19:33:36 UTC |
| Profile Built | 2026-08-12 19:43:18 UTC |
| Data Freshness | Live |
| Signal Types | 27 |
| Total Observations | 27 |
Full dossier details are available via our API.