34.105.161.20📋 Copy

# IP Intelligence Briefing: 34.105.161.20/32

## Executive Summary

IP 34.105.161.20 presents a low-risk threat profile with a risk score of 25. The address is owned by Google LLC and operates within the Google Cloud infrastructure. No malicious activity, threat indicators, or abuse patterns were detected during analysis. The IP is classified as a single-service host with no evidence of malicious campaign association.

## Ownership and Infrastructure

• Organization: Google LLC
• ASN: 396982
• Network: GOOGL-2 (34.64.0.0/10)
• Registration: ARIN registry
• Infrastructure Type: Google Cloud provider

## Geolocation

• Country: United Kingdom (GB)
• Region: England
• City: London
• Coordinates: 51.51, -0.13
• Timezone: Europe/London

## Network Classification

• Role: Google Cloud provider
• Connection Type: Single-service host
• Anycast: Not detected
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Blacklist Count: 0

## DNS Configuration

• PTR Record: 20.161.105.34.bc.googleusercontent.com
• Forward Resolution: Confirmed
• Domain: googleusercontent.com
• Security: SPF record present, DMARC record present
• DNSSEC: Valid

## Services and Ports

• Open Port: TCP 22 (SSH)
• SSH Banner: SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18

## Threat Indicators

• Abuse Confidence Score: Not applicable
• Threat Feeds: No matches
• Known Campaigns: None
• Campaign Likelihood: None
• Certificate Matches: 0

## Neighborhood Analysis

• Subnet: 34.105.161.0/24
• Abuse Density: 0%
• Classification: Clean
• Active Siblings: 0
• Threat Siblings: 0

## Historical Observations

Analysis of 23 historical observations revealed no persistent malicious activity:

• Ownership Changes: 0
• Threat Observation Count: 0
• Threat Persistence Days: 0
• Not Persistently Malicious: Confirmed
• Most recent observation (2026-08-13) showed standard routing and geolocation signals with no threat indicators.

## Control Plane Assessment

• Origin ASN: 396982
• BGP Prefix: 34.105.160.0/20
• Route Stability: Stable
• RPKI State: Valid
• DNSSEC Valid: Yes
• CAA Records: Present
• DNSBL Listed: 1 of 8 lists checked

## Recommended Actions

No specific security actions or firewall rules are recommended at this time. The IP presents a standard Google Cloud infrastructure profile with no malicious indicators. Standard network defense policies for Google Cloud services apply.

## Conclusion

IP 34.105.161.20 is a legitimate Google Cloud infrastructure address with a clean security posture. No threat mitigation actions are required beyond standard operational monitoring.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.