34.174.148.10📋 Copy

# IP Intelligence Briefing: 34.174.148.10/32

## Executive Summary

IP address 34.174.148.10 is a Google Cloud Compute instance (GOOGL-2) with a low-risk profile (score: 25/100). The address belongs to Google LLC (ASN 396982) and is geolocated to Dallas, TX, USA. Infrastructure is classified as cloud-based with a single open SSH port. No active threat indicators, blacklist entries, or known campaign associations were detected.

## Risk Assessment

• Overall Risk Score: 25 (Low Risk)
• Provider Score: 0
• Authority Score: 0
• Abuse Confidence Score: Not applicable
• Blacklist Status: Clean (0 listings)
• Risk Classification: Low Risk

## Infrastructure Profile

## Network Services

• Open Ports: TCP/22 (SSH - OpenSSH_10.0)
• TLS Certificate: None detected
• HTTP Title: Not available
• DNS PTR: 10.148.174.34.bc.googleusercontent.com
• Forward Resolution: Confirmed
• Email Authentication: SPF and DMARC records present

## Threat Intelligence

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Known Campaigns: None identified
• Threat Feeds: None
• Recent Threat Observations: 1 (historical)

## Observational History

Analysis of 23 historical observations reveals consistent cloud infrastructure characteristics. Recent signals confirm Google Cloud hosting with infrastructure classification as CloudCompute. Operator score remains at 0.3478 (Basic). One historical observation noted subnet-level abuse density of 1 with "mostly_clean" classification. No significant risk escalation patterns observed.

## Neighborhood Analysis

Subnet 34.174.148.10/24 shows:

• Abuse Density: 0 (neighborhood data) / 1 (profile data) - conflicting metrics
• Total Siblings: 2
• Active Siblings: 2
• Threat Siblings: 2
• Inherited Risk: 5/100
• Neighbor Risk Distribution: 0 high, 1 medium, 0 low

One neighboring IP (34.174.148.194) exhibits elevated risk score (50) with high authority score (90), warranting separate monitoring.

## Recommended Actions

No specific security actions were recommended based on current risk profile. The IP represents legitimate cloud infrastructure with no immediate threat indicators. Standard cloud provider IP ranges are typically allowed through perimeter controls unless specific threat intelligence indicates otherwise.

## SOC Analyst Notes

• Classification: Cloud Infrastructure / Google Cloud
• Monitoring Priority: Low
• Block Recommendation: Not recommended
• Investigation Priority: Low - No active threats detected
• Related Entities: Multiple DNS associations to 10.148.174.34.bc.googleusercontent.com; same network GOOGL-2

Status: Monitor as legitimate cloud infrastructure. No blocking required at this time.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.