34.122.107.221📋 Copy

# IP Intelligence Briefing: 34.122.107.221/32

Classification: Cloud Infrastructure (Google Cloud Platform)

Risk Assessment: Low Risk (Score: 25/100)

Date: 2026-06-21

---

## Executive Summary

IP 34.122.107.221 is a Google Cloud Platform compute instance with a low-risk reputation profile. The IP belongs to Google LLC (ASN 396982, GOOGL-2 CIDR block 34.64.0.0/10) and operates as a single-service cloud host. No active threat indicators, malware campaigns, or blacklist listings were identified. The IP resolves to a Googleusercontent.com hostname, indicating legitimate CDN/cloud infrastructure usage.

---

## Technical Profile

Ownership & Classification

• Organization: Google LLC
• ASN: AS396982
• CIDR Block: 34.64.0.0/10
• Infrastructure Type: CloudCompute (Google Cloud)
• Registration: RIR-ARIN

Geolocation Data

• Reported Location: Council Bluffs, Iowa, US
• Coordinates: 41.26°N, -95.86°W
• Timezone: America/Chicago
• Note: Geographic validation shows RTT discrepancy (58ms observed vs. 144.4ms minimum for 7,219km distance), suggesting potential geolocation database inaccuracy common with cloud infrastructure.

Network Services

• Open Ports: TCP/22 (SSH) — OpenSSH_8.4p1 Debian
• DNS PTR: 221.107.122.34.bc.googleusercontent.com
• Forward Resolution: Confirmed (googleusercontent.com)
• Email Auth: SPF and DMARC records present

---

## Threat Intelligence Indicators

Current Status

• Risk Score: 25 (Low Risk)
• Abuse Confidence: None
• Blacklist Count: 0
• Known Campaigns: None
• Threat Feeds: None
• Tor Exit Node: False
• Known Attacker: False
• Spam Source: False

Control Plane

• BGP Prefix: 34.122.96.0/20
• Route Stability: Unstable
• DNSSEC: Valid
• DNSBL Listings: 1 of 8 lists (minimal)

---

## Observation History

Total observations recorded: 23

Temporal Analysis

• Recent Activity: Observations from 2026-06-21 indicate stable geolocation reporting (Council Bluffs, IA)
• Historical Threat Signal: Single observation on 2026-06-16 flagged "has_threats: true" with Pulse count: 4 (pulse names redacted). Current profile shows no active threats, suggesting transient or misattributed signal.
• Risk Trend: Stable low-risk profile with no persistent malicious behavior observed.
• Ownership Changes: None recorded

---

## Relationship Network

• DNS Associations: 33 relationships total, primarily DNS associations to googleusercontent.com hostnames
• Network Relationships: Same network (GOOGL-2)
• External Links: No cross-organization or certificate relationships identified

---

## Subnet Neighborhood Analysis

• Subnet: 34.122.107.0/24
• Abuse Density: 0 (mostly clean classification)
• Total Siblings: 1
• Active Siblings: 1
• Threat Siblings: 1 (transient)
• High/Medium Risk Neighbors: 0

---

## Recommended Actions

Firewall/Network Rules

No specific blocking or filtering actions recommended. The IP presents a low-risk profile consistent with legitimate Google Cloud infrastructure.

SOC Analyst Guidance

• Monitor: SSH port activity on cloud infrastructure is common; no immediate concern unless port scanning or brute force patterns observed.
• Context: Geographic validation discrepancy is typical for cloud IPs; do not use geolocation alone for threat assessment.
• Historical Signal: The 2026-06-16 threat signal appears transient and not correlated with current profile; review if this IP was involved in any specific incident.

Classification Decision

No action required. IP is classified as legitimate cloud infrastructure with low-risk reputation. No blocking, alerting, or investigation actions recommended unless specific threat correlation occurs.

---

*Intel generated by IPDebrief Intelligence Platform. Data accurate as of 2026-06-21.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.