34.74.27.247📋 Copy

# IP Intelligence Briefing: 34.74.27.247/32

## Executive Summary

IP 34.74.27.247 is a Google Cloud infrastructure host (GOOGL-2 network, ASN 396982) with a moderate risk score of 40. The IP is classified as "mostly_clean" within its subnet and shows no direct threat indicators. Geolocation data indicates South Carolina, US, though validation metrics suggest potential data inaccuracies.

## Ownership & Classification

• Organization: Google LLC
• Network: GOOGL-2 (34.64.0.0/10)
• ASN: 396982
• Infrastructure: Google Cloud provider
• Role: Single-Service Host

## Technical Profile

• DNS: Resolves to 247.27.74.34.bc.googleusercontent.com (googleusercontent.com)
• PTR Record: 247.27.74.34.bc.googleusercontent.com
• Open Services: Port 22/SSH (OpenSSH 9.6p1 Ubuntu-3ubuntu13.18)
• Email Authentication: SPF and DMARC records present
• DNSSEC: Valid

## Risk Assessment

## Control Plane Analysis

• BGP Prefix: 34.74.16.0/20
• Route Stability: Unstable
• RPKI State: Not verified
• Route Changes (30d): 0
• DNSBL Listed: 2 lists

## Neighborhood Analysis

• Subnet: 34.74.27.247/24
• Abuse Density: 1 (low)
• Classification: mostly_clean
• Threat Siblings: 1
• Active Siblings: 0

## Historical Observations (24 total)

• Recent Subnet Classification (2026-08-13): mostly_clean, abuse_density 1, inherited_risk 2
• Control Plane Operator Score (2026-08-13): 0.4, label "Basic"
• Geolocation (2026-08-06): Moncks Corner, SC, US (confidence 0.28)

## Geolocation Validation

• Reported Location: Moncks Corner, SC, US
• Distance Discrepancy: 6,958 km
• RTT Violation: 36.0ms < minimum possible 139.2ms
• GEO Plausible: No
• Note: RTT and distance metrics indicate significant geolocation data discrepancy

## Relationships

• DNS Associations: 247.27.74.34.bc.googleusercontent.com
• Network: GOOGL-2 (same network)

## Recommended Actions

No explicit security recommendations were generated due to lack of direct threat indicators. However, the following firewall rules were provided for blocking:

• iptables: `iptables -A INPUT -s 34.74.27.247 -j DROP`
• nftables: `nft add rule inet filter input ip saddr 34.74.27.247 drop`
• nginx: `deny 34.74.27.247;`
• pfSense: `34.74.27.247/32`
• Cloudflare WAF: Block rule with expression `ip.src eq 34.74.27.247`
• AWS WAF: Address `34.74.27.247/32`

## Intelligence Narrative

This IP represents a Google Cloud infrastructure endpoint with moderate risk classification. The lack of direct threat indicators and clean threat feed status suggest legitimate cloud infrastructure usage. However, the geolocation validation failure and DNSBL listings warrant continued monitoring. The IP is not part of any known campaigns and shows no persistent malicious behavior. The neighborhood analysis indicates a low-abuse-density subnet with minimal threat correlation.

Recommendation: Monitor for changes in behavior or risk profile. No immediate blocking required unless additional threat indicators emerge.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.