34.81.104.22📋 Copy

# IP Intelligence Briefing: 34.81.104.22/32

Classification: Google Cloud Infrastructure (Low-Moderate Risk)

Report Date: 2026-08-06

Analyst: IPDebrief Intelligence Team

---

## Executive Summary

IP 34.81.104.22 is a Google Cloud infrastructure address with a moderate risk score of 50. The address shows no active threat indicators, no open services, and is associated with legitimate Google Cloud operations. Neighborhood analysis indicates extremely low abuse density. No immediate blocking is recommended, though monitoring is advised due to DNSBL listings.

---

## Infrastructure Profile

Risk Assessment: Moderate Risk (Score: 50)

• Provider Score: 0
• Authority Score: 0
• Threat Indicators: None detected

---

## Threat Intelligence

Malicious Activity Status: CLEAN

• Blacklist Count: 0 (general abuse lists)
• DNSBL Listings: 2 out of 8 total lists
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Active Campaigns: None correlated

Service Status: Firewalled / No Services Detected

• Open Ports: None
• TLS Certificates: None
• HTTP Banner: None

---

## Observation History

Total Observations: 21

Threat Persistence: 0 days (not persistently malicious)

Recent Activity Timeline:

• 2026-08-06: Geolocation signals (New Taipei, TW), operator scoring (Basic classification)
• 2026-07-31: Port scanning activity detected

Geolocation Consensus: Mixed signals with 2500km accuracy radius. ICMP validation shows 9348.8km distance from probe location (ICMP blocked).

---

## Network Relationships

DNS Associations: Multiple PTR records point to 22.104.81.34.bc.googleusercontent.com

Network Affiliation: Same Network relationships to GOOGL-2 (34.64.0.0/10)

---

## Neighborhood Analysis

Subnet: 34.81.104.22/24

• Abuse Density: 0 (Extremely Low)
• Classification: mostly_clean
• Inherited Risk: 2
• Threat Siblings: 1
• Active Siblings: 0

Conclusion: The /24 subnet is predominantly clean with minimal abuse correlation.

---

## Recommended Actions

Firewall Rules:

• No immediate blocking recommended
• Standard egress/ingress policies apply

Monitoring Recommendations:

1. Monitor DNSBL listing changes (currently 2 listings)

2. Track port scan activity from 2026-07-31

3. Verify Google Cloud infrastructure legitimacy for any inbound connections

Threat Level: LOW

Action: Permit with standard logging

---

Intelligence Source: IPDebrief®

Data Freshness: Real-time

Confidence Level: High (Multiple data source corroboration)

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.