# IP Intelligence Briefing: 34.101.103.191/32
## Executive Summary
IP 34.101.103.191 is registered to Google Asia Pacific Pte. Ltd. (GAPPL) under the GOOGLE-CLOUD network (34.101.0.0/16). The address resolves to Indonesian infrastructure (Jakarta, ID) and is associated with Google Cloud compute infrastructure. The IP carries a moderate risk score of 50 but lacks active threat indicators, suggesting legitimate cloud service usage with minimal abuse association.
## Ownership and Classification
- Organization: Google Asia Pacific Pte. Ltd. (GAPPL)
- ASN: 396982
- CIDR Block: 34.101.0.0/16
- Network Role: Cloud infrastructure (Google Cloud)
- Infrastructure Type: CloudCompute
- DNS Resolution: 191.103.101.34.bc.googleusercontent.com (googleusercontent.com)
- Reverse DNS: Confirmed forward resolution
## Threat Assessment
| Indicator | Status |
|---|---|
| Risk Score | 50 (Moderate) |
| Known Attacker | No |
| Spam Source | No |
| Tor Exit Node | No |
| Blacklist Count | 0 |
| Abuse Confidence Score | Not Available |
| Known Campaigns | None |
| Active Threat Indicators | None |
The moderate risk score (50) is driven by operator score (0.3478) and 2 DNSBL listings across 8 total lists, but no active threat signatures or malicious behavior patterns were detected.
## Network Environment
- Neighborhood: 34.101.103.0/24 subnet
- Abuse Density: 0 (Clean)
- Threat Siblings: 0
- Classification: Clean
- Total Siblings: 1 active
- Open Ports: None detected
- Service Status: Firewalled / No Services
## Geolocation
- Country: Indonesia (ID)
- Region/City: Jakarta
- Accuracy Radius: 2,500 km
- RTO Consensus: Valid (5 probe sources)
## Historical Observation
Twenty-two observations collected indicate stable classification as Google Cloud infrastructure with no significant threat pattern evolution. The subnet has maintained clean classification throughout the observation period. No persistent malicious activity detected.
## Recommended Actions
No specific blocking is required based on threat indicators alone. The following rules are available if blocking is deemed necessary:
- iptables: `iptables -A INPUT -s 34.101.103.191 -j DROP`
- nftables: `nft add rule inet filter input ip saddr 34.101.103.191 drop`
- Cloudflare WAF: Block with expression `ip.src eq 34.101.103.191`
## Analyst Notes
This IP represents legitimate Google Cloud infrastructure. The moderate risk score reflects standard operator scoring metrics rather than confirmed malicious activity. No blocking action is recommended unless correlated with specific malicious activity in the SOC. Monitor for any changes in threat indicators or neighborhood abuse patterns.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Google Asia Pacific Pte. Ltd. (GAPPL) |
| ASN | AS396982 |
| Network Name | GOOGLE-CLOUD |
| CIDR Block | 34.101.0.0/16 |
| RIR | ARIN |
| Country | Singapore |
| Abuse Contact | โ |
๐ DNS Intelligence
| PTR | 191.103.101.34.bc.googleusercontent.com |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | 191.103.101.34.bc.googleusercontent.com |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 3 |
| routing | 17% | 1 | 1 |
| services | 24% | 2 | 2 |
| ownership | 24% | 2 | 2 |
| reputation | 17% | 1 | 2 |
| geolocation | 35% | 2 | 3 |
| Overall | 25% | 10 | 13 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-08-05 00:08:22 UTC |
| Last Seen | 2026-08-13 06:59:46 UTC |
| Profile Built | 2026-08-13 07:17:21 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 22 |
Full dossier details are available via our API.