# IP Intelligence Briefing: 34.148.169.10/32
Classification: Low Risk / Google Cloud Infrastructure
Date: 2026-08-06
Analyst: IPDebrief Intelligence Team
---
## Executive Summary
IP 34.148.169.10 is a Google Cloud Compute infrastructure address located in Moncks Corner, SC, US. Overall risk assessment indicates low threat level (Risk Score: 25/100). While the IP operates within legitimate Google Cloud infrastructure, intelligence indicates minor security concerns including one DNSBL listing and geolocation validation discrepancies.
---
## Infrastructure Profile
| Attribute | Value |
|---|---|
| **Owner** | Google LLC (ASN 396982) |
| **Network** | GOOGL-2 (34.128.0.0/10) |
| **Infrastructure** | Google Cloud Compute |
| **Geolocation** | Moncks Corner, SC, US |
| **DNS Hostname** | 10.169.148.34.bc.googleusercontent.com |
| **Risk Score** | 25 (Low Risk) |
| **Abuse Contact** | Available via RDAP |
---
## Threat Indicators
| Indicator | Status |
|---|---|
| **DNSBL Listings** | 1 of 8 lists (1 DNSBL listing) |
| **Known Attacker** | No |
| **Spam Source** | No |
| **Tor Exit Node** | No |
| **High Severity Listings** | Yes (1 detected) |
| **Max Severity** | High |
---
## Observations & Anomalies
Geolocation Validation Failure: Traceroute analysis indicates a significant discrepancy between claimed location and network performance metrics. Observed RTT of 35ms contradicts the minimum possible RTT of 139.2ms for a 6,958 km distance, flagging geolocation data as implausible.
Recent Activity (Last 16 Observations):
- SSH service banner detected: `SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u10`
- DNSSEC validation: Valid
- Service scanning activity observed
- One high-severity threat feed listing
---
## Network Neighborhood Analysis
| Metric | Value |
|---|---|
| **Subnet** | 34.148.169.10/24 |
| **Neighbor Count** | 1 |
| **Abuse Density** | 0% |
| **Neighbor Risk Score** | 25 (34.148.169.177) |
| **Classification** | Low Risk |
The subnet demonstrates minimal abuse activity with only one neighboring IP detected, also showing low risk profile.
---
## Recommendations
SOC Action: Monitor but no immediate blocking required. IP operates within legitimate Google Cloud infrastructure.
Firewall Rules:
- No blocking recommended for standard traffic
- Monitor for SSH connection attempts from unexpected sources
- Alert on high-severity threat feed matches
Additional Context:
- The single DNSBL listing warrants periodic review but does not indicate active malicious use
- Infrastructure classification as Cloud Compute with "Firewalled / No Services" suggests minimal exposure
- Geolocation validation failure is a data quality issue rather than security concern
---
Status: Clear for business operations
Review Frequency: Standard (quarterly) or triggered by threat intelligence updates
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 34.128.0.0/10 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 10.169.148.34.bc.googleusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 10.169.148.34.bc.googleusercontent.com |
π DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Single-Service Host |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
| SSH Version | SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u10 |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 3 |
| routing | 17% | 1 | 1 |
| services | 24% | 2 | 2 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 35% | 2 | 3 |
| Overall | 27% | 10 | 14 |
| Data Coherence | Mostly Consistent (80%) β 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-08-02 23:10:25 UTC |
| Last Seen | 2026-08-13 04:20:08 UTC |
| Profile Built | 2026-08-13 04:26:38 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 22 |
Full dossier details are available via our API.