34.151.106.189📋 Copy

# IP Intelligence Briefing: 34.151.106.189/32

## Executive Summary

IP address 34.151.106.189 is a Google Cloud infrastructure endpoint registered to AS396982 (Google LLC) within the 34.128.0.0/10 CIDR block. The asset presents low risk (risk score: 20) with no active threat indicators or blacklist associations. No malicious activity or peer compromise observed within the /24 neighborhood.

## Network Classification

• Organization: Google LLC (AS396982)
• Network Name: GOOGL-2
• Infrastructure Type: CloudCompute
• Classification: Google Cloud hosting infrastructure
• Risk Score: 20 (Low Risk)

## Geolocation & Routing

• Location: Sydney, NSW, Australia
• Geolocation Accuracy: Consensus geovalidation flagged as implausible (RTT 218ms vs. minimum possible 330.6ms for 16,532km distance)
• BGP Prefix: 34.151.96.0/20
• Route Stability: False (instability detected in control plane)
• RPKI State: Not validated

## Service Exposure

• Open Ports: TCP/22 (SSH)
• SSH Banner: SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18
• TLS Certificate: None detected
• HTTP Title: None detected

## DNS Profile

• Reverse DNS: 189.106.151.34.bc.googleusercontent.com
• Forward Resolution: Confirmed (1 hostname)
• Email Auth: SPF and DMARC records present (hasSPF: true, hasDMARC: true)
• Forward Hostnames: 189.106.151.34.bc.googleusercontent.com

## Threat Assessment

• Abuse Confidence Score: Not calculated
• Blacklist Count: 0
• Known Attacker: False
• Spam Source: False
• Tor Exit Node: False
• Threat Indicators: None detected
• Threat Persistence: Not persistently malicious

## Historical Observations

21 observations recorded. Notable signals include:

• 2026-08-13: Proxy/VPN detection from proxycheck-io (risk score: 66, proxy_type: VPN)
• 2026-08-13: RTT/geovalidation violation (218ms < 330.6ms minimum for claimed distance)
• 2026-08-06: No ownership changes or threat persistence

## Neighborhood Analysis

• Subnet: 34.151.106.0/24
• Abuse Density: 0
• Total Siblings: 0
• Threat Siblings: 0
• High/Medium Risk Neighbors: 0

## Intelligence Assessment

IP 34.151.106.189 is a legitimate Google Cloud Compute instance with standard SSH exposure. The geolocation discrepancy (RTT violation) indicates potential measurement inconsistency rather than misattribution. The single open SSH port aligns with expected cloud infrastructure configurations. No evidence of malicious activity, abuse, or compromise. The proxy/VPN classification in historical data likely reflects Google Cloud's VPN infrastructure services rather than this specific IP.

## Recommended Actions

• Monitor for changes in service exposure or threat indicators
• No immediate blocking or firewall restrictions recommended
• Treat as trusted infrastructure with standard Google Cloud policies

---

*Report generated based on IPDebrief intelligence data. All findings are derived from observed signals and should be correlated with internal security events.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.