34.76.214.95📋 Copy

# IP Intelligence Briefing: 34.76.214.95/32

## Executive Summary

IP address 34.76.214.95 is a Google Cloud infrastructure endpoint with a moderate risk score (65/100). The address resolves to googleusercontent.com domain and shows no currently active services. While the IP belongs to Google's cloud network (ASN 396982), elevated risk scoring and multiple DNSBL listings warrant defensive monitoring.

## Risk Profile

• Risk Score: 65/100 (Moderate Risk)
• Provider Score: 0/100
• Authority Score: 0/100
• Abuse Confidence Score: Not available
• Classification: Cloud Infrastructure (Google Cloud)

## Ownership & Infrastructure

## Geolocation

• Country: Belgium (BE)
• City: Brussels
• Region: Brussels Capital
• Coordinates: 50.85°N, 4.35°E

*Note: Historical signals show conflicting geolocation data (US detected in one observation with 0.35 confidence).*

## Network Services

• Open Ports: None detected (firewalled)
• Active Services: None observed
• DNS Resolution: 95.214.76.34.bc.googleusercontent.com
• Email Authentication: SPF and DMARC records present

## Threat Indicators

• Blacklist Status: Listed on 3 of 8 DNSBL sources (max severity: high)
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Campaign Associations: None detected

## Historical Observations (16 total)

Recent activity from 2026-07-31 shows:

• DNSBL listings detected (3 out of 8 lists)
• Multiple geolocation signals with varying confidence levels
• Ownership stability maintained
• No persistent malicious behavior observed

## Neighborhood Analysis

• Subnet: 34.76.214.95/24
• Abuse Density: 0
• Threat Siblings: 0
• Active Siblings: 0
• Classification: Clean neighborhood

## Control Plane Data

• Route Stability: Unstable (isRouteStable: false)
• DNSSEC Valid: Yes
• CAA Records: Present
• Origin ASN: 396982
• BGP Prefix: 34.76.208.0/20

## Recommended Actions

Immediate: Increase logging verbosity and review recent traffic patterns from this IP.

Firewall Rules:

```bash

# iptables

iptables -A INPUT -s 34.76.214.95 -j DROP

# nftables

nft add rule inet filter input ip saddr 34.76.214.95 drop

# nginx

deny 34.76.214.95;

# pfSense

34.76.214.95/32

# Cloudflare WAF

Block 34.76.214.95 — IPDebrief risk score 65

# AWS WAF

Addresses: ["34.76.214.95/32"]

```

## SOC Analyst Notes

This IP represents Google Cloud infrastructure with a moderate risk score. The primary concern stems from DNSBL listings (3/8 lists with high severity), though the IP shows no currently active malicious services or threat indicators. The route instability flag suggests potential BGP routing anomalies. Given the Google Cloud ownership and clean neighborhood metrics, this appears to be a reputation-related issue rather than active threat activity. Continue monitoring for any changes in behavior or additional blacklist additions.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.