34.26.101.14📋 Copy

# Intelligence Briefing: 34.26.101.14/32

## Executive Summary

IP 34.26.101.14 is a Google Cloud infrastructure address with a moderate risk profile (score: 50). The IP is associated with Google LLC (ASN 396982) and resolves to the googleusercontent.com domain. No active services were detected on the IP, and it is configured with standard email authentication (SPF/DMARC).

## Technical Profile

## Threat Indicators

• DNSBL Listings: 2 out of 8 total lists
• Known Campaigns: None detected
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No

The moderate risk score appears to be driven by DNSBL listings rather than active malicious behavior. The IP has no open ports or services accessible, indicating it is likely a backend infrastructure component that is properly firewalled.

## Historical Analysis

Sixteen observations were recorded, most recent on 2026-08-13. Signal types included:

• Control plane data (operator score: 0.3478, labeled "Basic")
• Geolocation data with conflicting RTT measurements
• Ownership stability indicators (no changes detected)

No persistent malicious activity was observed. The IP demonstrates stability with zero ownership changes and zero threat persistence days.

## Network Relationships

• Same Network: GOOGL-2 (repeated association)
• DNS Association: 14.101.26.34.bc.googleusercontent.com
• Total Relationships: 6 entries

## Neighborhood Analysis

The /24 subnet (34.26.101.0/24) contains:

• Total Siblings: 1
• Abuse Density: 0
• Neighbor IP: 34.26.101.53 (risk score: 25, authority score: 90)

The subnet demonstrates low abuse activity with one neighboring IP at lower risk than the subject IP.

## Recommended Actions

• Monitor: Continue monitoring for service exposure changes
• Block Decision: Low priority for blocking; IP is Google Cloud infrastructure
• Email Filtering: SPF and DMARC are properly configured; no immediate email reputation concerns
• Firewall Rules: No immediate blocking required based on current profile

## Conclusion

This IP represents Google Cloud content delivery infrastructure. The moderate risk rating is primarily DNSBL-driven rather than indicative of active threat activity. No immediate threat mitigation is required, but continued observation is recommended to verify continued benign operation.

---

*Generated: [Current Date]*

*Intel Level: Standard SOC*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.