34.80.247.28
IP Intelligence Briefing: 34.80.247.28/32
Risk Profile: Low Risk (Risk Score: 25) | Stability: Unstable | Threat Indicators: None Detected
Key Findings:
1. Network Context:
- Owned by Google Cloud (infrastructure type: unknown).
- Geolocated to New York, NY, US with no additional geographic validation.
- No open ports or active services detected.
2. Threat Observations:
- No malicious indicators, spam, or known attacker associations.
- DNS records point to googleusercontent.com (PTR: `28.247.80.34.bc.googleusercontent.com`).
- DNSSEC and CAA records are valid, but the IP is listed in 1 DNSBL (open resolver).
3. Behavioral Insights:
- 12 historical observations (last 30 days) show minimal signal activity.
- No persistent malicious behavior or ownership changes.
- BGP route stability is low, with inconsistent routing paths.
4. Neighbor Analysis:
- No sibling IPs or subnet abuse detected in the /24 subnet.
Recommendations:
- Monitor DNS activity for unexpected changes.
- Consider allowing traffic to Google Cloud infrastructure, as this IP is associated with benign services.
- No immediate mitigation required based on current data.
Tools Used: `ipdebrief_profile`, `ipdebrief_history`, `ipdebrief_relationships`, `ipdebrief_neighbors`.
Final Assessment: This IP appears to be a legitimate Google Cloud asset with no current threat indicators. No action required unless further anomalies are detected.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 34.64.0.0/10 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 28.247.80.34.bc.googleusercontent.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | 28.247.80.34.bc.googleusercontent.com |
🔐 DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 3 |
| routing | 17% | 1 | 1 |
| services | 24% | 2 | 2 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 17% | 1 | 1 |
| Overall | 24% | 9 | 12 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-06-11 21:18:11 UTC |
| Last Seen | 2026-06-21 19:16:56 UTC |
| Profile Built | 2026-06-21 19:23:13 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 21 |
Full dossier details are available via our API.