34.11.201.81
Inteligence Briefing: 34.11.201.81
Executive Summary
The target IP address was identified as legitimate Google Cloud infrastructure associated with Google LLC (ASN 396982). The profile indicated a Low Risk reputation with a risk score of 15. No active threat indicators or malicious campaigns were observed during the assessment period.
Technical Profile
The IP resolved to `81.201.11.34.bc.googleusercontent.com` via reverse DNS. Ownership was attributed to the `GOOGL-2` network block. Geolocation data placed the server in The Dalles, Oregon, US. The system fingerprint indicated HTTP/2.0 usage with a 403 status code. Server headers contained Kubernetes-specific identifiers (x-kubernetes-pf-flowschema-uid), suggesting containerized infrastructure. DNS hygiene was rated excellent with valid SPF, DMARC, and DNSSEC configurations.
Threat Assessment
The neighborhood classification was clean with zero abuse density. The control plane showed valid RPKI state and route stability issues noted but no route hijacking. Behavioral analysis reported zero honeypot hits, no enumeration strikes, and no WAF violations. The IP was not listed on known threat feeds or associated with known attackers.
Recommendation
The system recommended a Monitor action with Low severity due to the established hosting context and clean neighborhood. No immediate firewall rules were generated. Continuous observation is advised to maintain situational awareness.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 34.4.5.0/24 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 81.201.11.34.bc.googleusercontent.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | 81.201.11.34.bc.googleusercontent.com |
🔐 DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | 1/4 domains |
| DMARC | 1/4 domains |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
| Domains Checked | 4 domains |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 365 days |
| Serial Number | 75D9775E241F2D3721AAD23A813AC4D3 |
| Thumbprint | 7E481F68D29A24C3BB3F114DE9A89D224633EAE8 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 28% | 2 | 4 |
| routing | 19% | 3 | 4 |
| services | 12% | 2 | 2 |
| ownership | 19% | 3 | 4 |
| reputation | 8% | 1 | 2 |
| geolocation | 17% | 2 | 3 |
| Overall | 17% | 13 | 19 |
| Data Coherence | Consistent (100%) |
| Attribution | High (85%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-10 17:28:50 UTC |
| Last Seen | 2026-09-14 10:37:20 UTC |
| Profile Built | 2026-09-14 10:46:21 UTC |
| Data Freshness | Live |
| Signal Types | 29 |
| Total Observations | 42 |
Full dossier details are available via our API.