34.56.189.87📋 Copy

IP INTELLIGENCE BRIEFING: 34.56.189.87/32

Classification: LOW RISK — Google Cloud Infrastructure

1. EXECUTIVE SUMMARY

IP address 34.56.189.87 is identified as legitimate Google Cloud infrastructure with a low-risk profile (Risk Score: 25). The address is associated with Google LLC (AS396982) and operates as cloud compute infrastructure. No malicious indicators or threat activity were observed during analysis.

2. OWNERSHIP AND GEOLOCATION

• Organization: Google LLC
• AS Number: 396982 (GOOGL-2)
• CIDR Block: 34.4.5.0/24
• Location: Council Bluffs, IA, United States
• Timezone: America/Chicago
• Registration: ARIN registry

3. NETWORK ROLE AND CLASSIFICATION

• Infrastructure Type: CloudCompute (Google Cloud Platform)
• DNS Resolves: 87.189.56.34.bc.googleusercontent.com
• Hosted Domain: googleusercontent.com
• Open Ports: TCP/443 (HTTPS)
• TLS Certificate: Kubernetes infrastructure certificates (kubernetes.default, kubernetes.default.svc)
• Server Banner: HTTP/2 enabled

4. THREAT ASSESSMENT

• Risk Score: 25 (Low)
• Abuse Confidence: Not applicable (legitimate cloud infrastructure)
• Blacklist Status: 0 blacklistings
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Threat Persistence: None detected
• Campaign Association: None

5. OBSERVATION HISTORY (29 Signals)

Historical analysis reveals consistent infrastructure patterns:

• DNS signals show Kubernetes cluster components (cluster.local, default.svc, kubernetes.default)
• ASN 396982 stability confirmed (2,862 days)
• No escalation in threat indicators
• SPF/DMARC records present on googleusercontent.com domain

6. RELATIONSHIP ANALYSIS (41 Relationships)

• DNS associations point to 87.189.56.34.bc.googleusercontent.com
• Network relationships confirm GOOGL-2 ownership
• No malicious entity correlations detected

7. NEIGHBORHOOD ANALYSIS (Subnet 34.56.189.0/24)

• Abuse Density: 0
• Classification: Mostly Clean
• Threat Siblings: 0
• Active Siblings: 0

8. CONTROL PLANE DATA

• BGP Prefix: 34.56.0.0/16
• Routing Stability: Confirmed (0 changes in 30 days)
• RPKI State: Valid
• DNSSEC: Valid

9. RECOMMENDED ACTIONS

No blocking or mitigation actions required. This IP represents legitimate Google Cloud infrastructure hosting Kubernetes-based services. Standard cloud provider traffic handling applies.

10. INTELLIGENCE CONFIDENCE

High confidence in benign classification based on:

• Established Google Cloud ownership
• Clean neighborhood metrics
• Kubernetes infrastructure certificates
• Zero threat indicators
• 2862-day ASN stability

ANALYST NOTES: This IP belongs to Google's cloud compute infrastructure. Traffic patterns consistent with legitimate cloud services. No defensive action recommended unless specific organizational policy requires cloud provider IP scrutiny.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.