34.24.152.182📋 Copy

IP Intelligence Briefing: 34.24.152.182/32

Classification: Moderate Risk

Date of Analysis: 2026-08-13

Executive Summary

The IP address 34.24.152.182 is associated with Google Cloud infrastructure (ASN 396982) and presents a moderate risk score of 65. The address resolves to Google-owned DNS infrastructure and is classified as a cloud computing endpoint with hosting capabilities. No open ports were detected; the endpoint is firewalled with no active services.

Ownership and Classification

• Organization: Google LLC
• ASN: 396982
• Netname: GOOGL-2
• Network Block: 34.4.5.0/24 (control plane origin: 34.24.0.0/16)
• Network Role: Google Cloud (CloudCompute infrastructure, hosting enabled)
• Geolocation: US, South Carolina, North Charleston (claimed coordinates: 39.83°N, -98.58°W)

Technical Observations

• DNS Resolution: 182.152.24.34.bc.googleusercontent.com (googleusercontent.com)
• PTR Record: Confirmed forward resolution
• Email Authentication: SPF and DMARC records present
• Control Plane: BGP route stability flagged as false; operator score: 0.3478 (Basic)
• DNSBL Listings: Listed on 3 of 8 total lists

Risk Assessment

• Overall Risk Score: 65 (Moderate Risk)
• Abuse Confidence: Not classified as known attacker, Tor exit node, or spam source
• Threat Indicators: No known campaigns, blacklists, or threat feed matches
• Persistence: No persistent malicious activity detected
• Geolocation Validation: GeoPlausible flag set to false; RTT measurements (47ms) inconsistent with claimed distance (6,958km, minimum possible 139.2ms)

Neighborhood Analysis

• Subnet: 34.24.152.0/24
• Abuse Density: 0.3333 (33.33%)
• Classification: Mostly Clean
• Sibling Count: 3 total IPs (2 active, 1 threat)
• Neighbor Risk: 34.24.152.5 (Risk: 25, Authority: 90) and 34.24.152.108 (Risk: 25, Authority: 90)

Observation History

• Total Observations: 17 signals recorded
• Recent Activity: All observations from 2026-08-13
• Key Signals:

- Geo validation violations (RTT distance inconsistency)

- Subnet abuse density assessment at 33.33%

- Country-level geolocation (US) with 2500km accuracy radius

- Operator classification: Basic

Relationship Graph

• DNS Associations: Multiple links to 182.152.24.34.bc.googleusercontent.com
• Network Associations: Multiple links to GOOGL-2 network

Recommended Actions

• Monitor for service enumeration attempts (no open ports currently detected)
• Review DNSBL listings for context (3 of 8 lists)
• No immediate blocking required; classification indicates legitimate cloud infrastructure
• Investigate if traffic patterns suggest abuse from this subnet (33.33% abuse density is moderate)

Analyst Notes

This IP is part of Google's cloud infrastructure and presents moderate risk primarily due to subnet-level abuse density rather than direct threat indicators. The geolocation validation inconsistency suggests potential data quality issues in the geolocation database rather than malicious activity. SOC analysts should monitor for policy violations if traffic originates from this subnet.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.