35.190.176.164📋 Copy

INTELLIGENCE BRIEFING: 35.190.176.164

Classification: Moderate Risk | Status: Active Infrastructure | Date: 2026-08-05

---

IP IDENTIFICATION

Target: 35.190.176.164/32

Organization: Google LLC (GOOGLE-CLOUD)

ASN: 396982

Location: North Charleston, South Carolina, US

Geolocation Confidence: Validated via multiple sources

RISK ASSESSMENT

Overall Risk Score: 50 (Moderate)

Abuse Confidence: Low

DNSBL Listings: 2 of 8 major lists

Threat Indicators: None detected

Campaign Correlation: None

The IP maintains a moderate risk posture attributable to its cloud provider status rather than malicious activity. Risk profile is stable with zero ownership changes and no persistent threat indicators observed.

NETWORK CONTEXT

Infrastructure Type: Google Cloud Platform (GCP)

Network Role: Firewalled / No Services Active

Open Ports: None detected

TLS/HTTP Services: Inactive

DNS Resolution: 164.176.190.35.bc.googleusercontent.com

Reverse DNS: Valid and consistent

Forward Confirmation: Confirmed

THREAT INTELLIGENCE

• Threat Feeds: No matches across monitored threat intelligence sources
• Known Campaigns: No associations with active malware campaigns or botnets
• Attacker Reputation: Not flagged as known attacker, spam source, or Tor exit node
• Scanning Activity: No active scanning or reconnaissance signals observed

HISTORICAL ANALYSIS

Observation Count: 21 signals tracked

Time Span: Recent monitoring window (last 30 days)

Threat Persistence: None detected

Ownership Changes: 0

Stability Label: Consistent infrastructure

Control plane analysis indicates route stability with no significant BGP anomalies. DNSSEC validation confirmed.

NEIGHBORHOOD ANALYSIS

Subnet: 35.190.176.0/24

Abuse Density: 0 (Clean)

Threat Siblings: 0

Classification: Clean

No adjacent IPs in the /24 subnet show malicious indicators. The infrastructure block demonstrates normal Google Cloud operational patterns.

RECOMMENDED ACTIONS

Based on the moderate risk classification and cloud provider context, the following actions are recommended:

1. Traffic Allowance: Permitted with standard logging. The IP represents legitimate Google Cloud infrastructure with no active threat indicators.

2. Rate Limiting: Apply standard rate limiting rules for Google Cloud IPs to prevent abuse of cloud resources.

3. DNSBL Monitoring: Monitor for changes in DNSBL status. Current listing count (2/8) warrants periodic review.

4. Signature Rules: Consider adding to allowlist for Google Cloud infrastructure if not already configured.

SOC DECISION MATRIX

CONCLUSION

35.190.176.164 is a legitimate Google Cloud Platform infrastructure IP with moderate risk due to provider classification rather than malicious activity. No active threats detected. Standard Google Cloud infrastructure handling is appropriate. The subnet shows clean abuse metrics with no threat siblings. Routine monitoring recommended.

---

Report Generated: 2026-08-05

Data Sources: IPDebrief Intelligence Platform

Classification: Defensive Security Intelligence

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.