34.28.76.52📋 Copy

# IP Intelligence Briefing: 34.28.76.52/32

## Executive Summary

Target IP 34.28.76.52 is classified as Low Risk (Score: 25) and operates within legitimate Google Cloud infrastructure. The IP demonstrates stable ownership under Google LLC (ASN: 396982) with no active threat indicators. One threat sibling detected in the /24 neighborhood warrants monitoring.

## Ownership & Infrastructure

• Organization: Google LLC
• ASN: 396982 (GOOGLE-CLOUD-PLATFORM)
• Network: 34.28.0.0/16
• Infrastructure Type: Cloud Compute (Google Cloud Platform)
• Hosting: Active
• Geolocation: Council Bluffs, IA, US (830km accuracy radius)

## Network Classification

• DNS Resolution: 52.76.28.34.bc.googleusercontent.com (googleusercontent.com)
• PTR Hostname: 52.76.28.34.bc.googleusercontent.com
• Email Authentication: SPF and DMARC records present
• Control Plane Status: Route stable, RPKI state not validated, DNSSEC valid
• Operator Score: 0.3478 (Basic classification)

## Threat Assessment

• Risk Score: 25 (Low)
• Blacklist Count: 0
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Active Threat Indicators: None detected
• Threat Persistence: Not persistently malicious
• Campaign Likelihood: Not established

## Neighborhood Analysis (34.28.76.0/24)

• Abuse Density: 1 (Low)
• Classification: Mostly Clean
• Active Threat Siblings: 1
• High-Risk Neighbors: 0
• Medium-Risk Neighbors: 0
• Low-Risk Neighbors: 0

## Observation History

21 historical observations tracked, showing consistent infrastructure characteristics:

• Recent (June 2026): Geo signals confirmed (Council Bluffs, US); ASN signals consistent (396982, GOOGLE-CLOUD-PLATFORM)
• Trend: Stable ownership and geolocation over observation period
• Threat Persistence: No malicious activity observed in history

## Recommended Actions

Risk Profile: Low Risk (25)

• No immediate firewall rules or blocking recommended
• Monitor for any changes in risk score or threat indicator emergence
• One threat sibling in /24 subnet requires continued monitoring
• No actionable recommendations generated due to benign infrastructure classification

## Intelligence Notes

This IP represents standard Google Cloud Platform infrastructure with legitimate DNS and email authentication configurations. The single threat sibling in the /24 neighborhood should be investigated separately if activity correlates with 34.28.76.52. No immediate defensive action required for this specific IP address.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.