## IP Intelligence Briefing: 34.96.52.17/32
Executive Summary
IP address 34.96.52.17 is a low-risk infrastructure endpoint owned and operated by Google LLC. The IP resolves to Google CloudCompute infrastructure in New York, USA, with a risk score of 25. No active threat indicators, blacklist listings, or malicious activity were observed. The address demonstrates stable cloud infrastructure characteristics consistent with legitimate Google services.
Ownership and Registration
- Organization: Google LLC
- ASN: 396982
- Network Name: GOOGL-2
- CIDR Block: 34.64.0.0/10
- RIR: ARIN
- Abuse Contact: google-cloud-compliance@google.com
Geolocation and Infrastructure
- Country: United States (US)
- Region: New York (US-NY)
- Infrastructure Type: CloudCompute
- Classification: Cloud Hosting
- Timezone: America/New_York
Threat Assessment
- Risk Score: 25 (Low Risk)
- Blacklist Count: 0
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Abuse Confidence Score: Not applicable
- Known Campaigns: None detected
- Threat Persistence Days: 0
- Persistently Malicious: No
Network Behavior and Services
- Open Ports: None detected
- DNS PTR: 17.52.96.34.bc.googleusercontent.com
- Forward Resolution: Confirmed (googleusercontent.com)
- Email Authentication: SPF and DMARC records present
- HTTP Services: No active HTTP services observed
- Connection Type: Cloud infrastructure
Historical Analysis
Seventeen observations were recorded across the observation period. The IP demonstrates consistent ownership attribution to Google LLC throughout the timeline. Infrastructure signals remain stable with no evidence of ownership changes or persistent malicious behavior. Recent observations confirm the IP maintains its classification as cloud compute infrastructure with low abuse density in its neighborhood.
Relationship Mapping
The IP maintains DNS associations with googleusercontent.com hostnames. Multiple relationships were identified within the GOOGL-2 network block. No unusual cross-network or cross-organization relationships were detected.
Neighborhood Analysis
The /24 subnet (34.96.52.17/24) exhibits clean classification with an abuse density of 0. Risk distribution shows one low-risk peer (34.96.52.37 with risk score 25). No high or medium-risk neighbors were identified.
Recommended Actions
Given the low risk profile and established Google Cloud infrastructure ownership, no immediate blocking or filtering actions are recommended. The IP should be treated as legitimate cloud infrastructure. Standard monitoring practices are advised to detect any behavioral changes.
Intelligence Notes
This IP address represents legitimate Google Cloud infrastructure. The absence of open ports and services suggests it may be part of a firewalled backend system or CDN node. No threat intelligence feeds flagged this address. Analysts should treat this IP as low-priority for blocking unless specific contextual indicators emerge.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 34.64.0.0/10 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 17.52.96.34.bc.googleusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 17.52.96.34.bc.googleusercontent.com |
π DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting β Infrastructure provider without advanced routing |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 0% | 0 | 0 |
| routing | 0% | 0 | 0 |
| services | 0% | 0 | 0 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 4% | 1 | 1 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-07-22 01:11:48 UTC |
| Last Seen | 2026-07-29 11:52:08 UTC |
| Profile Built | 2026-07-29 12:17:58 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 20 |
Full dossier details are available via our API.