34.140.44.220📋 Copy

IP INTELLIGENCE BRIEFING

Target: 34.140.44.220/32

Classification: Google Cloud Infrastructure

Risk Assessment: Moderate Risk (65/100)

---

EXECUTIVE SUMMARY

IP 34.140.44.220 is a Google Cloud infrastructure host operating from the 34.128.0.0/10 block, registered to Google LLC (ASN 396982). The address resolves to googleusercontent.com with DNS PTR record 220.44.140.34.bc.googleusercontent.com. The IP carries a moderate risk score of 65 and appears in 3 DNSBL lists across 8 total blacklist sources.

---

TECHNICAL PROFILE

Ownership & Location:

• Organization: Google LLC
• ASN: 396982 (GOOGL-2)
• Geolocation: Brussels, Belgium (BE)
• CIDR Block: 34.128.0.0/10

Network Role:

• Infrastructure: Google Cloud provider
• Classification: Single-Service Host
• Anycast: Not detected

Active Services:

• Port 22/TCP: SSH (OpenSSH_9.2p1 Debian-2+deb12u10)
• No TLS certificate or HTTP service detected

Control Plane:

• BGP Prefix: 34.140.32.0/20
• Route Stability: False
• DNSSEC: Valid
• CAA Records: Present
• DNSBL Listings: 3/8 total lists

---

THREAT INDICATORS

Current Signals:

• Risk Score: 65/100 (Moderate)
• Abuse Confidence Score: Not available
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Campaign Likelihood: None

Historical Observations:

• Total Signals: 23 observations
• Recent Activity: Signals observed through 2026-08-13
• No persistent malicious behavior detected
• Threat observation count: 0
• Is persistently malicious: No

---

NETWORK CONTEXT

Subnet Analysis (34.140.44.0/24):

• Abuse Density: 0 (Clean)
• Total Siblings: 2
• Active Siblings: 1
• Threat Siblings: 0

Neighbor IP: 34.140.44.51 (Risk Score: 25, Authority Score: 90)

Relationships:

• Primary DNS Association: 220.44.140.34.bc.googleusercontent.com
• Network associations: GOOGL-2 (multiple entries)

---

OBSERVED BEHAVIOR

Geolocation Validation:

• Minimum Possible RTT: 4.7ms
• Average RTT: 93.8ms
• Minimum RTT: 90ms
• Probe Count: 5
• Geo Plausible: True

---

RECOMMENDED ACTIONS

Security Posture:

• Increase logging verbosity for traffic from this IP
• Review recent activity patterns due to elevated risk score (65/100)

Firewall Rules:

*iptables:*

```

iptables -A INPUT -s 34.140.44.220 -j DROP

```

*nftables:*

```

nft add rule inet filter input ip saddr 34.140.44.220 drop

```

*nginx:*

```

deny 34.140.44.220;

```

*pfSense:*

```

34.140.44.220/32

```

*Cloudflare WAF:*

```json

{

"description": "Block 34.140.44.220 — IPDebrief risk score 65",

"action": "block",

"filter": {

"expression": "ip.src eq 34.140.44.220"

}

}

```

*AWS WAF:*

```json

{

"Addresses": ["34.140.44.220/32"],

"Description": "IPDebrief risk 65"

}

```

---

INTEL GENERATED: 2026-08-13

DATA SOURCES: IPDebrief, RDAP, DNSBL aggregators

ANALYSIS STATUS: Complete

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.