34.23.13.76📋 Copy

# IP Intelligence Briefing: 34.23.13.76

Classification: LOW RISK – Google Cloud Infrastructure

Briefing Date: June 2026

---

## Executive Summary

IP address 34.23.13.76 is identified as Google Cloud Compute infrastructure with a low-risk security profile. The IP resolves to a legitimate Google-owned web server endpoint in Moncks Corner, South Carolina, with no observed malicious activity or threat indicators.

---

## Network Identity & Ownership

• ASN: 396982 (Google LLC)
• Organization: Google LLC
• Location: Moncks Corner, South Carolina, United States (33.21°N, -80.17°W)
• RIR: ARIN
• Infrastructure Type: Cloud Compute Provider
• Network Classification: Cloud-hosted Web Server

---

## Threat Assessment

Overall Risk Score: 25 (Low Risk)

Threat Indicators:

• Not a known attacker
• Not a spam source
• Not a Tor exit node
• No active blacklist listings
• No correlated campaign activity
• Abuse confidence score: Not applicable

DNS Analysis:

• PTR Hostname: `76.13.23.34.bc.googleusercontent.com`
• Forward resolution confirmed
• Email authentication: SPF and DMARC records present
• DNSSEC: Valid

---

## Technical Profile

Services:

• Port 443/TCP (HTTPS) – Active
• TLS Protocol: TLS 1.3
• Cipher Suite: TLS_AES_128_GCM_SHA256
• HTTP Version: 2.0
• Response Time: 153ms
• HTTP Status: 403 Forbidden (expected for web server access control)

TLS Certificate:

• Issuer: CN=03f8e59e-0574-4d2f-ba0b-7be7171b40d8
• Subject: CN=34.148.70.8
• SANs: kubernetes, kubernetes.default, kubernetes.default.svc, kubernetes.default.svc.cluster.local
• Self-signed: No

HTTP Fingerprint:

• Content-Type Options: nosniff
• HSTS: Not present
• CSP: Not present
• Favicon Hash: de7a18faf698e950

---

## Historical Observation Analysis

Total Observations: 23 signals

Recent Activity:

• Latest observation: 2026-06-19T19:36:11 UTC
• Signal coverage: 6 dimensions (threat, routing, services, ownership, reputation, geolocation)
• Confidence level: 0.25 (medium)
• Operator score: 0.3478 (Basic)

Temporal Analysis:

• No persistent malicious behavior detected
• Ownership changes: 0
• Threat observation count: 1
• Threat persistence days: 0
• IP is not persistently malicious

---

## Relationship Graph Analysis

Total Relationships: 60

Key Associations:

• Network: GOOGL-2 (Google internal network)
• DNS Hostname: 76.13.23.34.bc.googleusercontent.com (multiple associations)
• Multiple DNS and network relationship types confirmed

Analysis: All relationships align with expected Google Cloud infrastructure patterns. No anomalous external associations detected.

---

## Neighborhood Analysis

Subnet: 34.23.13.76/24

Abuse Density: 1 (Extremely Low)

Classification: mostly_clean

Total Sibling IPs: 1

Active Siblings: 1

Threat Siblings: 1 (minimal risk)

Risk Distribution:

• High Risk: 0
• Medium Risk: 0
• Low Risk: 0
• Inherited Risk: 2

Assessment: The /24 subnet shows minimal abuse activity consistent with legitimate Google Cloud infrastructure. No concerning neighbor patterns observed.

---

## Recommended Actions

SOC Analyst Guidance:

• No immediate blocking required
• IP represents legitimate Google Cloud infrastructure
• Monitor for any behavioral changes consistent with Google Cloud's security posture
• Standard traffic logging recommended for compliance
• No firewall rules required

Note: This IP should be treated as benign infrastructure. The 403 response code is typical for Google Cloud web servers implementing access control mechanisms.

---

Data Sources: IPDebrief Intelligence Platform

Confidence Level: High

Last Updated: June 2026

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.