# INTELLIGENCE BRIEFING: 34.61.30.27/32
## Executive Summary
IP 34.61.30.27 is a low-risk infrastructure address associated with Google Cloud. The asset exhibits no malicious indicators, with a risk score of 25/100 and clean classification across all threat feeds. No immediate blocking or mitigation actions recommended.
---
## Asset Profile
| Attribute | Value |
|---|---|
| **IP Address** | 34.61.30.27/32 |
| **Risk Score** | 25 (Low Risk) |
| **Organization** | Google LLC |
| **ASN** | 396982 |
| **Network** | GOOGL-2 (34.4.5.0/24) |
| **Geolocation** | Council Bluffs, IA, US |
| **Infrastructure Type** | Google Cloud |
| **Service Status** | Firewalled / No Services Detected |
---
## Threat Assessment
- Known Malicious Activity: None
- Tor Exit Node: No
- Spam Source: No
- Known Attacker: No
- Blacklist Count: 0
- DNSBL Listed: 1 of 8 total lists
Threat Indicators: Empty. No indicators present in current or historical threat feeds.
---
## Network Environment
- Subnet: 34.61.30.0/24
- Abuse Density: 0 (clean)
- Active Siblings: 2
- Threat Siblings: 0
- Neighbor Risk Distribution: 1 low-risk neighbor (34.61.30.38, risk score: 25)
---
## Historical Analysis
Total observations: 17 signals tracked over recent period.
- Classification Consistency: Maintained "clean" classification across all observations
- Abuse Density: Consistently at 0
- Geolocation Stability: Consistent US/Council Bluffs, IA attribution
- Ownership Stability: No changes detected
---
## Infrastructure Indicators
- DNS PTR: 27.30.61.34.bc.googleusercontent.com
- Forward Resolution: Confirmed to bc.googleusercontent.com
- Open Ports: None detected
- TLS Certificate: None
- HTTP Services: None active
- Reverse DNS: Active and consistent with Google infrastructure
---
## Recommended Actions
Status: No action required
The IP address represents legitimate Google Cloud infrastructure with no security concerns. Standard observation and logging protocols recommended. No firewall rules or blocking measures warranted.
---
## SOC Analyst Notes
- Asset is Google Cloud infrastructure (known legitimate cloud provider)
- No open services detected; properly firewalled
- Clean neighborhood with zero abuse density
- Historical data shows consistent benign behavior
- Continue passive monitoring; no immediate threat indicators present
Confidence: High β Infrastructure address with verified ownership and clean threat profile.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 34.4.5.0/24 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 27.30.61.34.bc.googleusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 27.30.61.34.bc.googleusercontent.com |
π DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | 1/4 domains |
| DMARC | 1/4 domains |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
| Domains Checked | 4 domains |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | β |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | kuberneteskubernetes.defaultkubernetes.default.svckubernetes.default.svc.cluster.local |
| Valid From | 2026-08-05T12:23:14+00:00 |
| Valid Until | 2027-08-05T12:25:14+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 365 days |
| Serial Number | 5B4BB2F131FD7B2B647656BB74CCBFE8 |
| Thumbprint | 96CCAA0864AC967D416CEF62759D11CFD2E935D1 |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 42% | 2 | 5 |
| routing | 13% | 1 | 1 |
| services | 32% | 2 | 3 |
| ownership | 30% | 2 | 3 |
| reputation | 28% | 1 | 3 |
| geolocation | 13% | 1 | 1 |
| Overall | 26% | 9 | 16 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-07-26 09:12:28 UTC |
| Last Seen | 2026-08-12 20:26:24 UTC |
| Profile Built | 2026-08-12 20:30:49 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 27 |
Full dossier details are available via our API.