# IP Intelligence Briefing: 34.23.60.217/32
Classification: LOW RISK / GOOGLE CLOUD INFRASTRUCTURE
Date: 2026-08-13
Analyst: IPDebrief Intelligence Team
## Executive Summary
IP 34.23.60.217 is a Google Cloud infrastructure endpoint with a low risk profile (score: 25). The address resolves to a web server in Moncks Corner, SC, operating over HTTPS on port 443. No active threat indicators were detected. The IP operates within a clean subnet (abuse density: 0.5) and shows no persistent malicious behavior.
## Technical Profile
| Attribute | Value |
|---|---|
| **Risk Score** | 25 / 100 |
| **Reputation** | Low Risk |
| **ASN** | 396982 |
| **Organization** | Google LLC |
| **Network** | GOOGL-2 (34.4.5.0/24) |
| **Geolocation** | US, SC, Moncks Corner |
| **Service** | Web Server (Google Cloud) |
| **Open Ports** | 443/TCP (HTTPS) |
| **TLS Version** | TLS 1.3 |
| **HTTP/2** | Enabled |
| **Status Code** | 403 |
## Threat Indicators
- Blacklist Count: 1 DNSBL listing
- Known Attacker: False
- Tor Exit Node: False
- Spam Source: False
- Campaign Associations: None identified
- Persistence: No persistent malicious activity detected (threat_persistence_days: 0)
## Network Context
The /24 subnet (34.23.60.0/24) contains 2 active sibling IPs with an abuse density rating of 0.5, classified as "mostly_clean." One neighbor IP (34.23.60.13) shares the same risk profile (score: 25), indicating consistent infrastructure behavior.
## Relationship Analysis
The IP maintains DNS associations with the hostname `217.60.23.34.bc.googleusercontent.com`, confirming its association with Google Cloud infrastructure. No cross-organizational or certificate-based relationships were detected.
## Historical Observations
Recent monitoring (2026-08-13) shows:
- Consistent HTTPS responses with 403 status codes (likely WAF or access control)
- HTTP/2 protocol in use
- TLS 1.3 cipher suite (TLS_AES_128_GCM_SHA256)
- No ownership changes or threat persistence observed
- Abuse density remained stable at 0.5
## Recommended Actions
No immediate blocking or mitigation actions required. The IP exhibits normal Google Cloud infrastructure behavior with standard access controls in place. Routine monitoring is appropriate.
Classification: DEFENSIVE / LOW PRIORITY
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 34.4.5.0/24 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 217.60.23.34.bc.googleusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 217.60.23.34.bc.googleusercontent.com |
π DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | 1/5 domains |
| DMARC | 1/5 domains |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
| Domains Checked | 5 domains |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | β |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | kuberneteskubernetes.defaultkubernetes.default.svckubernetes.default.svc.cluster.local |
| Valid From | 2026-08-09T04:15:25+00:00 |
| Valid Until | 2027-08-09T04:17:25+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 365 days |
| Serial Number | 00DFF1C253D577ABD4ABECCB39E0203D48 |
| Thumbprint | F67700FF8E35C98C4A31B7A41CC4C5874E850C25 |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 30% | 2 | 4 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 23% | 10 | 16 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-08-08 16:30:53 UTC |
| Last Seen | 2026-08-31 19:41:31 UTC |
| Profile Built | 2026-08-31 19:46:38 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 35 |
Full dossier details are available via our API.