# IP Intelligence Briefing: 34.74.26.158/32
## Executive Summary
IP 34.74.26.158 is a Google Cloud infrastructure endpoint associated with Google LLC (ASN 396982). The IP demonstrates low risk characteristics with a risk score of 0 and no active threat indicators. The address resolves to Googleusercontent.com infrastructure and shows Kubernetes-related service records.
## Ownership and Infrastructure
- Organization: Google LLC
- ASN: 396982 (GOOGL-2)
- Network Block: 34.64.0.0/10
- Infrastructure Type: Google Cloud Web Server
- Geolocation: Moncks Corner, South Carolina, US (33.21°N, -80.17°W)
- RIR: ARIN
## Network Classification
- Service Purpose: Web Server
- Open Ports: TCP 443 (HTTPS)
- HTTP Status: 403 (Forbidden) responses observed
- Protocol: HTTP/2 enabled
- TLS Certificate: Self-signed certificate with Kubernetes service account subjects (kubernetes.default.svc)
## Threat Assessment
Overall Risk: Low Risk (Score: 0)
- No known attacker reputation
- No spam source classification
- No Tor exit node association
- Zero blacklist listings across threat feeds
- No active campaign correlations detected
## DNS and Resolution
- PTR Record: 158.26.74.34.bc.googleusercontent.com
- Forward Resolution: Confirmed to googleusercontent.com
- Email Authentication: SPF and DMARC records present
- DNSSEC: Valid
- CAA Records: Present
## Historical Observations
Analysis of 27 signal observations identified:
- Kubernetes-related DNS records (kubernetes.default, cluster.local, default.svc)
- High-severity listing activity detected on 2026-08-12 across 8 threat feeds
- HTTP fingerprinting consistent with Google Cloud infrastructure
- Average response time: 126ms
## Neighborhood Analysis
Subnet 34.74.26.0/24 assessment:
- Abuse Density: 0 (clean)
- Total Siblings: 1
- Active Siblings: 1
- Threat Siblings: 1
- Classification: Mostly clean
## Control Plane Data
- BGP Prefix: 34.74.16.0/20
- Route Stability: Unstable
- MOAS: Not detected
- Operator Score: 0.3478 (Basic)
- DNSBL Listings: 0 of 8 total lists
## Relationship Mapping
Primary DNS association: 158.26.74.34.bc.googleusercontent.com
Multiple same-network associations with GOOGL-2 infrastructure identified.
## Recommended Actions
No specific security actions or firewall rules recommended. The IP presents no actionable threat indicators. Standard monitoring for Google Cloud infrastructure is advised.
Classification: Defensive monitoring, no immediate blocking required.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 34.64.0.0/10 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 158.26.74.34.bc.googleusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 158.26.74.34.bc.googleusercontent.com |
π DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | 1/4 domains |
| DMARC | 1/4 domains |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
| Domains Checked | 4 domains |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | β |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | kuberneteskubernetes.defaultkubernetes.default.svckubernetes.default.svc.cluster.local |
| Valid From | 2026-08-04T23:01:35+00:00 |
| Valid Until | 2031-08-03T23:03:35+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 1825 days |
| Serial Number | 22D8AB84F6F13CFA86AC579592D76294 |
| Thumbprint | 59B96AE3B66E44C4E3A41870E204BA6028B56EFE |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 36% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 36% | 2 | 4 |
| ownership | 30% | 2 | 3 |
| reputation | 28% | 1 | 3 |
| geolocation | 27% | 2 | 3 |
| Overall | 28% | 10 | 18 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-07-28 22:22:26 UTC |
| Last Seen | 2026-08-12 22:59:06 UTC |
| Profile Built | 2026-08-12 23:03:39 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 28 |
Full dossier details are available via our API.