# IP INTELLIGENCE BRIEFING: 35.195.116.82/32
## EXECUTIVE SUMMARY
IP 35.195.116.82 is a Google Cloud infrastructure address associated with moderate risk (40/100). The address exhibits no active threat indicators, no open services, and clean neighborhood classification. Recommended action: No immediate blocking required; maintain standard monitoring.
---
## INFRASTRUCTURE PROFILE
- Ownership: Google LLC (ASN 396982, GOOGLE-CLOUD)
- CIDR Block: 35.192.0.0/12
- Geolocation: St. Ghislain, Belgium (BE)
- Network Classification: Cloud infrastructure with firewalled services
- DNS Resolution: 82.116.195.35.bc.googleusercontent.com (googleusercontent.com)
- Status: No open ports detected; HTTP/HTTPS services not exposed
---
## THREAT ASSESSMENT
| Metric | Value | Assessment |
|---|---|---|
| Risk Score | 40 | Moderate |
| Abuse Confidence | N/A | Not applicable |
| Blacklist Count | 0 | Clean |
| DNSBL Listings | 2 of 8 | Minor listings |
| Known Campaigns | None | No correlation |
| Tor/Exit Node | False | Not a TOR address |
| Known Attacker | False | No malicious attribution |
---
## OBSERVATION HISTORY
- Total Observations: 22 signals
- Latest Signals: 2026-08-05, 2026-07-30
- Threat Persistence: 0 days (not persistently malicious)
- Ownership Stability: No changes detected
- ICMP Validation: Blocked (unable to validate geolocation)
- Trend: Stable infrastructure profile with no escalating threat indicators
---
## NEIGHBORHOOD ANALYSIS
- Subnet: 35.195.116.0/24
- Abuse Density: 0 (clean)
- Active Siblings: 1
- Threat Siblings: 0
- Neighbor IP: 35.195.116.146 (Risk Score: 25, Authority Score: 90)
---
## RELATIONSHIP MAPPING
- DNS Associations: 82.116.195.35.bc.googleusercontent.com (repeated)
- Network Relationships: GOOGLE-CLOUD (multiple entries)
- External Threat Links: None identified
- Correlated IPs: 0
---
## SOC ACTIONS & RECOMMENDATIONS
1. Firewall Policy: No immediate blocking required. Standard cloud traffic monitoring applies.
2. Traffic Classification: Classify as Google Cloud service traffic; allow outbound/inbound based on legitimate service requirements.
3. DNSBL Monitoring: Address appears on 2 of 8 DNSBL lists; investigate context of listings if receiving reports of spam/malicious activity from this source.
4. Observation Baseline: Establish baseline for Google Cloud traffic patterns; monitor for behavioral changes.
---
## CONCLUSION
This IP represents legitimate Google Cloud infrastructure with no active threat indicators. The moderate risk score (40) reflects cloud infrastructure classification rather than malicious activity. SOC teams should treat traffic from this address as legitimate cloud service communication unless specific abuse reports emerge.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGLE-CLOUD |
| CIDR Block | 35.192.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | 82.116.195.35.bc.googleusercontent.com |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | 82.116.195.35.bc.googleusercontent.com |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | 1/4 domains |
| DMARC | 1/4 domains |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
| Domains Checked | 4 domains |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | โ |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | kuberneteskubernetes.defaultkubernetes.default.svckubernetes.default.svc.cluster.local |
| Valid From | 2026-08-01T08:09:37+00:00 |
| Valid Until | 2027-08-01T08:11:37+00:00 |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 32% | 2 | 3 |
| ownership | 27% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 25% | 10 | 16 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-07-27 09:39:30 UTC |
| Last Seen | 2026-08-12 21:28:54 UTC |
| Profile Built | 2026-08-12 21:41:16 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 26 |
Full dossier details are available via our API.