34.26.58.21
# IP Intelligence Briefing: 34.26.58.21/32
Date: August 2026
Analyst: IPDebrief Intelligence Division
Classification: LOW RISK — Legitimate Infrastructure
---
## Executive Summary
IP address 34.26.58.21 is identified as a Google Cloud Platform infrastructure endpoint with no malicious indicators. The address shows a risk score of 0, zero blacklist listings, and operates within Google's standard cloud compute environment in South Carolina. No security actions or firewall rules are recommended for this asset.
---
## Ownership and Infrastructure
| Attribute | Value |
|---|---|
| **Organization** | Google LLC |
| **ASN** | 396982 |
| **CIDR Block** | 34.4.5.0/24 |
| **Provider** | Google Cloud Platform |
| **Infrastructure Type** | CloudCompute |
| **Region** | South Carolina, US |
| **City** | Moncks Corner |
The IP resolves to the googleusercontent.com domain via PTR record `21.58.26.34.bc.googleusercontent.com`, confirming Google Cloud infrastructure hosting.
---
## Threat Assessment
Overall Risk Score: 0 (Low Risk)
| Indicator | Finding |
|---|---|
| Blacklist Count | 0 |
| Abuse Confidence Score | Not applicable |
| Known Attacker | No |
| Spam Source | No |
| Tor Exit Node | No |
| Active Threat Campaigns | None |
| Known Campaign Correlation | None |
No threat indicators were detected across the threat feeds. The IP does not appear on any DNSBL lists or threat intelligence sources.
---
## Network Context
Subnet Analysis (34.26.58.0/24):
- Abuse Density: 0.5% (Low)
- Neighbor Count: 1 active sibling (34.26.58.238)
- Neighbor Risk Score: 0
- Subnet Classification: Mostly clean
Control Plane:
- BGP Prefix: 34.26.0.0/16
- Route Changes (30-day): 2
- Route Stability: Inconsistent
- DNSSEC Status: Valid
- RIR Registry: ARIN
---
## Historical Observations
Total Signals: 27 observations recorded
Recent signal history (August 2026) confirms:
- ASN 396982 (GOOGLE-CLOUD-PLATFORM) consistently resolved
- Geolocation signals point to Moncks Corner, SC with 0.56 confidence
- DNS blacklist checks returned zero listings
- Operator score remains at basic classification (0.4348)
No ownership changes or persistent threat observations recorded.
---
## Services and Ports
- Open Ports: None detected
- TLS Certificate: Not observed
- HTTP Banner: No active services detected
- Infrastructure Type: Firewalled / No Services
This aligns with Google Cloud's typical infrastructure deployment pattern where backend compute instances are not directly exposed to the public internet.
---
## Related Entities
DNS Associations:
- `21.58.26.34.bc.googleusercontent.com` (multiple records)
Network Associations:
- GOOGL-2 network (multiple same-network relationships)
---
## Recommendations
Security Actions: None required
The IP address exhibits characteristics of legitimate Google Cloud infrastructure. Standard monitoring and logging practices are sufficient. No blocking or rate-limiting rules are recommended.
Monitoring Guidelines:
- Maintain baseline observation for Google Cloud infrastructure
- Monitor for unexpected service changes on this IP
- Continue standard network flow analysis
---
Conclusion: 34.26.58.21/32 represents clean, legitimate cloud infrastructure with no observed malicious activity. No further action required.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 34.4.5.0/24 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 21.58.26.34.bc.googleusercontent.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | 21.58.26.34.bc.googleusercontent.com |
🔐 DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | 1/4 domains |
| DMARC | 1/4 domains |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
| Domains Checked | 4 domains |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | kuberneteskubernetes.defaultkubernetes.default.svckubernetes.default.svc.cluster.local |
| Valid From | 2026-08-08T00:45:38+00:00 |
| Valid Until | 2031-08-07T00:47:38+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 1825 days |
| Serial Number | 00AF79072ECBA4F1FACED1C0B22ADC2194 |
| Thumbprint | 1E4F5CD9CE0CC4A470D55BE4783ABEBCDC6842ED |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 31% | 2 | 4 |
| routing | 32% | 2 | 3 |
| services | 19% | 2 | 2 |
| ownership | 34% | 3 | 4 |
| reputation | 28% | 1 | 3 |
| geolocation | 27% | 2 | 2 |
| Overall | 28% | 12 | 18 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-25 14:53:11 UTC |
| Last Seen | 2026-08-12 19:45:30 UTC |
| Profile Built | 2026-08-12 19:58:45 UTC |
| Data Freshness | Live |
| Signal Types | 27 |
| Total Observations | 36 |
Full dossier details are available via our API.