## IP Intelligence Briefing: 34.146.236.158/32
Executive Summary
IP address 34.146.236.158 is classified as low risk (score: 25) and is associated with Google Cloud infrastructure. The IP presents no active threat indicators and demonstrates stable characteristics consistent with legitimate cloud computing operations. No immediate blocking or filtering action is recommended.
Infrastructure Profile
Ownership: Google LLC (ASN 396982, Organization: GOOGL-2)
Network Block: 34.128.0.0/10
Geolocation: Tokyo, Japan (35.68°N, 139.69°E)
Infrastructure Type: CloudCompute (Google Cloud Platform)
Classification: Legitimate cloud hosting environment
Network Services
- Open Ports: TCP/22 (SSH) - OpenSSH 9.6p1 Ubuntu-3ubuntu13.18
- DNS Resolution: 158.236.146.34.bc.googleusercontent.com (googleusercontent.com)
- Reverse DNS: Forward confirmed with proper PTR record
Threat Assessment
Overall Risk Score: 25 (Low Risk)
Threat Indicators: None detected
- Known attacker: No
- Spam source: No
- Tor exit node: No
- Blacklist count: 0 (DNSBL: 1/8 listings detected, max severity: high)
- Campaign correlations: None identified
Abuse Confidence: Not elevated for this infrastructure type
Campaign Likelihood: None
Historical Observations
Analysis of 22 observation records indicates stable infrastructure characteristics:
- Consistent cloud provider classification (Google Cloud)
- Geographic consistency with Tokyo region
- No significant risk escalation patterns observed
- Operator score maintained at basic level (0.3478)
Neighborhood Analysis
Subnet: 34.146.236.0/24
- Abuse Density: 0 (clean subnet)
- Threat Siblings: 0
- Risk Distribution: No high or medium risk neighbors identified
Recommended Actions
Based on the risk profile and infrastructure classification:
- No immediate blocking recommended - IP represents legitimate cloud infrastructure
- Monitoring: Standard logging and traffic observation sufficient
- Context: SSH service exposure is typical for cloud management interfaces
Intelligence Notes
The IP address represents standard Google Cloud Platform infrastructure used for cloud computing workloads. The presence of a DNSBL listing is anomalous but does not indicate active malicious behavior given the low overall risk score and absence of threat indicators. No correlation with known campaigns or threat actors was identified.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 34.128.0.0/10 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | 158.236.146.34.bc.googleusercontent.com |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | 158.236.146.34.bc.googleusercontent.com |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Single-Service Host |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
| SSH Version | SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18 |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 3 |
| routing | 17% | 1 | 1 |
| services | 24% | 2 | 2 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 35% | 2 | 3 |
| Overall | 27% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-08-01 16:33:38 UTC |
| Last Seen | 2026-08-13 02:49:59 UTC |
| Profile Built | 2026-08-13 03:00:06 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 23 |
Full dossier details are available via our API.