34.84.119.248📋 Copy

# IP Intelligence Briefing: 34.84.119.248/32

Classification: Low Risk - Cloud Infrastructure

Date: 2026-08-06

Analyst: Automated Intelligence System

---

## Executive Summary

IP 34.84.119.248 is a legitimate Google Cloud infrastructure endpoint with a low risk profile (25/100). No malicious activity, threat indicators, or blacklist associations detected. The IP operates as a single-service host with standard cloud infrastructure exposure.

---

## Technical Profile

Ownership & Classification

Geolocation

Network Services

• Open Ports: 22/TCP (SSH)
• SSH Banner: SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18
• DNS Resolution: 248.119.84.34.bc.googleusercontent.com
• PTR Record: Forward confirmed via googleusercontent.com domain
• Email Auth: SPF and DMARC records present

---

## Risk Assessment

Threat Indicators

• Risk Score: 25/100 (Low Risk)
• Abuse Confidence: None
• Blacklist Count: 0
• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Known Campaigns: None

Control Plane

• Route Stability: Unstable (route changes detected in last 30 days)
• RPKI State: Not validated
• DNSSEC: Valid
• DNSBL Listed: 1 of 8 lists

---

## Observation History (Last 18 Signals)

Recent activity observed on 2026-08-06:

• Geolocation: Consistently resolved to Tokyo, Japan (confidence: 56%)
• Port Scanning: SSH port 22 detected with standard Ubuntu OpenSSH configuration
• Network Performance: Average RTT 174.2ms, minimum possible 184.25ms
• Threat Persistence: 0 days observed
• Ownership Changes: 0 changes detected

No escalation in risk signals over observation period. IP maintains stable cloud infrastructure characteristics.

---

## Relationship Analysis

Connected Entities (9 relationships identified)

• Network: GOOGL-2 (6 instances - same network associations)
• Hostname: 248.119.84.34.bc.googleusercontent.com (3 instances - DNS association)

No external malicious relationships or campaign correlations detected.

---

## Neighborhood Analysis

Subnet: 34.84.119.248/24

• Total Siblings: 0
• Active Siblings: 0
• Abuse Density: 0%
• Threat Siblings: 0
• Risk Distribution: High: 0, Medium: 0, Low: 0

The /24 subnet contains no other monitored IPs, indicating either sparse addressing or limited visibility. No neighborhood abuse patterns observed.

---

## Recommended Actions

Allow/Legitimate Traffic

Monitoring Considerations

1. SSH Activity: Monitor for unusual connection patterns from external IPs

2. DNS Queries: Verify 248.119.84.34.bc.googleusercontent.com resolution consistency

3. Route Changes: Investigate reason for BGP prefix instability

---

## Conclusion

IP 34.84.119.248 is a legitimate Google Cloud Platform infrastructure endpoint located in Tokyo, Japan. The low risk score (25/100), absence of threat indicators, and clean blacklist status confirm benign cloud infrastructure operations. The exposed SSH service is typical for managed cloud instances. No defensive blocking recommended; standard monitoring practices apply.

Threat Level: None

Recommended Action: Permit with standard logging

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.