35.193.212.113📋 Copy

# IP Intelligence Briefing: 35.193.212.113/32

Classification: Cloud Infrastructure (Google Cloud)

Risk Level: LOW (Score: 25)

Date: Current Analysis

---

## Executive Summary

IP address 35.193.212.113 is assigned to Google LLC within the GOOGLE-CLOUD network block (35.192.0.0/12). The IP is classified as cloud compute infrastructure with no active service exposure. No open ports detected, and no services responding on standard ports.

---

## Ownership & Network Context

• Organization: Google LLC
• ASN: 396982
• CIDR Block: 35.192.0.0/12
• Geolocation: Council Bluffs, IA, US (41.88°N, -93.1°W)
• DNS PTR: 113.212.193.35.bc.googleusercontent.com

The IP belongs to Google's cloud infrastructure, a major cloud hosting provider. No bogon or residential characteristics observed.

---

## Threat Assessment

Current Risk Indicators:

• No known attacker indicators
• No spam source classification
• No Tor/VPN/proxy characteristics
• Zero open ports detected
• Zero active threat indicators

Blacklist Status:

• One historical DNS blacklist listing detected (high severity)
• Total DNSBL lists: 8
• Abuse confidence score: Not applicable (cloud infrastructure)

---

## Observed Anomalies

Geolocation Inconsistencies:

• Recent RTT measurements show 56-63ms round-trip times to claimed location
• Minimum possible RTT for claimed distance (7,218km) is 144.4ms
• RTT violation flagged as non-plausible (confidence: 0.30)
• Multi-signal inference places location in Council Bluffs, IA with 80% confidence (830km accuracy radius)

This RTT discrepancy is common with cloud hosting infrastructure where geolocation may not reflect actual physical location.

Historical Observations:

• 15 total signal observations recorded
• DNSSEC validation confirmed
• CAA records present
• DNS resolution confirmed (forward lookup verified)

---

## Network Neighborhood

• /24 Subnet (35.193.212.0/24): No neighboring IPs identified
• Abuse Density: 0 (no active abuse in neighborhood)
• Risk Distribution: 0 high/medium/low risk neighbors

---

## Relationship Graph

• DNS Association: 113.212.193.35.bc.googleusercontent.com
• Network Association: GOOGLE-CLOUD
• Total Relationships: 4

---

## Recommended Actions

For SOC Teams:

• No immediate blocking required; IP is cloud infrastructure
• Monitor for any service activation if previously dormant
• Geo-location inconsistencies warrant standard cloud provider behavior monitoring
• Historical blacklist listing (high severity) may indicate past abuse activity

Firewall Considerations:

• No actionable firewall rules generated (cloud infrastructure, no services exposed)
• If inbound traffic is unexpected, investigate service activation

Monitoring Recommendations:

• Watch for service port openings
• Monitor RTT/geolocation consistency changes
• Track blacklist status updates

---

## Conclusion

35.193.212.113 is a low-risk Google Cloud infrastructure IP with no current active threat indicators. Historical blacklist listing and RTT anomalies are consistent with cloud hosting patterns. No immediate threat action recommended.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.