34.87.228.61📋 Copy

IP Intelligence Briefing: 34.87.228.61/32

Date: 2026-08-06

Classification: LOW RISK / INFRASTRUCTURE

---

**Executive Summary**

IP address 34.87.228.61 is classified as Low Risk (Risk Score: 25/100) and represents legitimate Google Cloud infrastructure. The IP shows no evidence of malicious activity, abuse, or association with threat campaigns. SOC teams should maintain standard monitoring; no immediate blocking or investigation required.

---

**Ownership & Infrastructure Profile**

---

**Risk Assessment**

• Risk Score: 25 (Low Risk)
• Abuse Confidence Score: Not applicable
• Threat Indicators: None detected
• Blacklist Count: 0
• Known Campaigns: None
• Persistence: No persistent malicious behavior observed

Control Plane Observations:

• DNSBL Listed: 1/8 lists (minor flag)
• Route Stability: False (minor network change indicator)
• RPKI State: Not validated
• Geo Plausibility: False (RTT anomaly noted: 223ms vs 330.6ms minimum for 16,532km distance)

---

**Network Neighborhood Analysis**

Subnet: 34.87.228.61/24

• Abuse Density: 0 (Clean)
• Threat Siblings: 0
• Active Siblings: 1
• Classification: Clean

No neighboring IPs within the /24 subnet show signs of malicious activity. The subnet maintains a clean classification with inherited risk of 0.

---

**Relationship Graph**

• DNS Association: 61.228.87.34.bc.googleusercontent.com
• Network Association: GOOGL-2 (multiple entries)
• Organizational Links: Google Cloud infrastructure
• Certificate Links: None

---

**Observation History (19 Signals)**

Recent signal history indicates stable infrastructure:

• Ownership Signals: 0 changes observed
• Classification Signals: Consistent "clean" classification
• Threat Persistence: 0 days
• Campaign Matches: 0
• Banner Matches: 0

No escalation in risk profile detected over observation period.

---

**Technical Services**

DNS PTR records resolve to: `61.228.87.34.bc.googleusercontent.com`

---

**Recommended Actions**

No immediate security actions required.

---

**SOC Analyst Notes**

• This IP represents normal Google Cloud infrastructure with standard SSH service.
• Minor geovalidation anomaly (RTT discrepancy) is common in anycast cloud deployments.
• Single DNSBL listing is likely a false positive or temporary flag.
• No correlation to known attack campaigns or malicious indicators.
• Conclusion: Legitimate infrastructure; continue standard monitoring.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.