# IP Intelligence Briefing: 34.50.116.167/32
## Executive Summary
IP address 34.50.116.167 is a Google Cloud infrastructure endpoint classified as Moderate Risk (Score: 50). The IP is associated with Google LLC (ASN 396982) and resolves to Googleusercontent.com domains. No active threat indicators or malicious reputation signals were detected across threat feeds. The subnet classification is clean with zero abuse density.
## Ownership and Network Classification
- Organization: Google LLC
- ASN: 396982 (GOOGL-2)
- Network Block: 34.4.5.0/24
- Provider: Google Cloud
- Infrastructure Type: Cloud hosting
## Geolocation Data
- Country: Indonesia (ID)
- Region: Jakarta
- Distance Validation: 11,247 km from reference point
- Minimum RTT: 255 ms
- Validation Status: Plausible
## Threat Indicators
- Risk Score: 50 (Moderate)
- Abuse Confidence: Not elevated
- Blacklist Count: 0
- Tor Exit Node: False
- Known Attacker: False
- Spam Source: False
- Known Campaigns: None detected
- Threat Feeds: Empty
## Network Services and Ports
- Open Ports: None detected
- TLS Certificate: Not present
- HTTP Service: No banner detected
- Service Purpose: Firewalled / No Services
- Forward Resolution: 167.116.50.34.bc.googleusercontent.com
## DNS Analysis
- PTR Hostnames: 167.116.50.34.bc.googleusercontent.com
- Forward Resolution Count: 1
- Domain: googleusercontent.com
- SPF Record: Present
- DMARC Record: Present
- DNSSEC Valid: True
## Historical Observations
Total observations: 17
- Recent ownership signals confirm Google LLC registration
- Geographic consistency maintained across probes
- No ownership changes detected
- Threat persistence: 0 days
- No persistent malicious activity observed
## Relationship Graph
- DNS Associations: Multiple entries pointing to 167.116.50.34.bc.googleusercontent.com
- Network Links: Same network (GOOGL-2)
- Total Relationships: 6
## Neighborhood Analysis (/24 Subnet: 34.50.116.167/24)
- Subnet Classification: Clean
- Abuse Density: 0
- Total Siblings: 1
- Active Siblings: 0
- Threat Siblings: 0
- High-Risk IPs: 0
- Medium-Risk IPs: 0
- Low-Risk IPs: 0
## Control Plane Data
- Origin ASN: 396982
- BGP Prefix: 34.50.64.0/18
- Route Stability: False
- Route Changes (30d): 0
- RPKI State: Not evaluated
- IRR Consistency: Not evaluated
- DNSBL Listed: 2 of 8 lists
## Recommended Security Actions
Despite the moderate risk classification, no specific threat-based recommendations were generated. However, the system provides the following firewall rules for the IP:
| Platform | Rule |
|---|---|
| iptables | `iptables -A INPUT -s 34.50.116.167 -j DROP` |
| nftables | `nft add rule inet filter input ip saddr 34.50.116.167 drop` |
| nginx | `deny 34.50.116.167;` |
| pfSense | `34.50.116.167/32` |
| Cloudflare WAF | Block 34.50.116.167 (Risk: 50) |
| AWS WAF | Address: 34.50.116.167/32 |
## Intelligence Assessment
The IP 34.50.116.167 represents a Google Cloud endpoint with a moderate baseline risk score of 50. This score appears to be a conservative default for cloud infrastructure. The IP shows no active threat indicators, no blacklist associations, and operates in a clean subnet environment. The geolocation data indicates deployment within Indonesian regions of Google's cloud infrastructure.
Recommendation: Monitor for activity patterns but no immediate blocking required unless additional threat intelligence correlates this IP with malicious behavior. The moderate risk score warrants continued observation but does not indicate active threat activity at this time.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 34.4.5.0/24 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | 167.116.50.34.bc.googleusercontent.com |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | 167.116.50.34.bc.googleusercontent.com |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Single-Service Host |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
| SSH Version | SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18 |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 24% | 2 | 2 |
| routing | 17% | 1 | 1 |
| services | 24% | 2 | 2 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 35% | 2 | 3 |
| Overall | 25% | 10 | 13 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-08-03 05:14:20 UTC |
| Last Seen | 2026-08-13 04:44:05 UTC |
| Profile Built | 2026-08-13 04:57:30 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 22 |
Full dossier details are available via our API.