# IP Intelligence Briefing: 34.13.12.227/32
Date: 2026-08-05
Classification: Low Risk / Legitimate Infrastructure
Primary Organization: Google LLC (ASN: 396982)
## Executive Summary
IP address 34.13.12.227 is identified as a Google Cloud Compute instance with a low-risk profile (risk score: 25). The endpoint is classified as a web server operating within Google's cloud infrastructure in London, United Kingdom. No malicious indicators, known campaigns, or threat activity have been observed. The IP maintains a clean reputation with zero blacklisting and no historical malicious behavior.
## Infrastructure Profile
| Attribute | Value |
|---|---|
| **Risk Score** | 25 (Low) |
| **Organization** | Google LLC |
| **ASN** | 396982 |
| **Netname** | GOOGL-2 |
| **Location** | London, England, GB |
| **Infrastructure Type** | CloudCompute |
| **Open Ports** | 443/TCP (HTTPS) |
| **Blacklist Count** | 0 |
## DNS and Reverse Resolution
- Reverse DNS: 227.12.13.34.bc.googleusercontent.com
- Forward Resolution: Confirmed (googleusercontent.com)
- TLS Certificate: CN=34.13.12.227 with Kubernetes service SAN entries
- Email Auth: SPF and DMARC records present
## Threat Indicators
- Abuse Confidence Score: Not applicable (legitimate cloud infrastructure)
- Known Attacker: False
- Spam Source: False
- Tor Exit Node: False
- Known Campaigns: None
- DNSBL Listings: 1 of 8 lists (minor listing)
## Network Neighborhood Analysis
Subnet 34.13.12.227/24 assessment:
- Abuse Density: 0 (clean)
- Threat Siblings: 0
- Active Siblings: 1
- Classification: Clean
No neighboring IPs within the /24 subnet show abuse indicators.
## Historical Signal Analysis
Observation history (25 total signals):
- Geolocation Consistency: Consistent London, GB positioning
- Ownership Stability: Zero ownership changes recorded
- Threat Persistence: 0 threat observation days
- Persistence Status: Not persistently malicious
Recent signals (2026-08-05) confirm stable infrastructure behavior with no new threat indicators.
## Relationship Graph
Primary associations identified:
- GOOGL-2 network (multiple network associations)
- 227.12.13.34.bc.googleusercontent.com (DNS associations)
All 18 relationships point to legitimate Google Cloud infrastructure and associated domains. No external threat actors or suspicious entities detected.
## Recommended Actions
Current Risk Level: LOW
Firewall/Security Recommendations:
- No blocking required for legitimate Google Cloud infrastructure
- Standard HTTPS traffic (port 443) may be permitted based on organizational policy
- Monitor for any changes in behavior or unexpected traffic patterns
Monitoring Considerations:
- No active threat intelligence alerts
- No correlation to known attack campaigns
- Standard cloud infrastructure monitoring applies
## Conclusion
IP 34.13.12.227 represents legitimate Google Cloud infrastructure with no malicious indicators. The endpoint serves as a cloud compute resource with standard HTTPS services. SOC analysts may treat this as benign infrastructure requiring standard network monitoring but no enhanced threat-focused measures.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 34.4.5.0/24 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | 227.12.13.34.bc.googleusercontent.com |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | 227.12.13.34.bc.googleusercontent.com |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 40% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 30% | 2 | 3 |
| ownership | 27% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 35% | 2 | 3 |
| Overall | 27% | 10 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-07-23 07:48:59 UTC |
| Last Seen | 2026-08-12 17:32:13 UTC |
| Profile Built | 2026-08-12 17:47:56 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 24 |
Full dossier details are available via our API.