35.195.132.247📋 Copy

# IP Intelligence Briefing: 35.195.132.247

Classification: Low Risk / Google Cloud Infrastructure

Date: 2026-06-21

Analyst: IPDebrief Intelligence Team

---

## Executive Summary

IP 35.195.132.247 is identified as legitimate Google Cloud infrastructure with a low risk profile. The address resolves to Google Cloud services in Belgium and shows no evidence of malicious activity. SOC teams may classify this as a benign infrastructure IP requiring standard monitoring.

---

## Key Findings

Risk Assessment

Ownership & Geolocation

• Organization: Google LLC
• Organization Name: GOOGLE-CLOUD
• ASN: 396982
• CIDR Block: 35.192.0.0/12
• Location: St. Ghislain, Belgium (BE)
• Region: WAL
• Geolocation Confidence: 0.56 (150km accuracy radius)

Network Classification

• Infrastructure Type: CloudCompute
• Provider: Google Cloud
• Is Cloud: Yes
• Is CDN: No
• Is Proxy/Vpn/Tor: No
• Is Residential: No

DNS Analysis

• PTR Hostname: 247.132.195.35.bc.googleusercontent.com
• Forward Resolution: Confirmed
• Domain: googleusercontent.com
• Forward Hostnames: 1 resolved
• DNSSEC Valid: Yes
• CAA Records: Present

Threat Indicators

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Known Campaigns: None
• Threat Feeds: None

---

## Observation History

The IP has generated 21 signal observations. Recent activity (2026-06-21) shows:

• Ownership Stability: No ownership changes detected
• Threat Persistence: 0 days (not persistently malicious)
• Threat Observation Count: 1 historical observation
• Subnet Abuse Density: 1 (mostly clean classification)

Signal types observed include ownership verification, subnet abuse density analysis, threat list checking, cloud provider identification, and geolocation inference. No escalation in risk behavior has been observed over the observation window.

---

## Relationship Graph

Analysis identified 19 relationships:

• Same Network (GOOGLE-CLOUD): Multiple associations confirm cloud infrastructure clustering
• DNS Association: All relationships point to hostname `247.132.195.35.bc.googleusercontent.com`
• Network Affiliation: All relationships confirm Google Cloud network ownership

No malicious or suspicious relationships detected. The IP exhibits standard Google Cloud network behavior patterns.

---

## Neighborhood Analysis

Subnet: 35.195.132.247/24

• Abuse Density: 1 (low)
• Classification: Mostly Clean
• Inherited Risk: 2
• Total Siblings: 1
• Active Siblings: 0
• Threat Siblings: 1

The immediate /24 neighborhood shows minimal abuse activity. One threat sibling was identified in the broader /24 classification, but this IP does not share direct neighborhood risk.

---

## Control Plane & Route Stability

• BGP Prefix: 35.195.128.0/20
• Origin ASN: 396982
• Route Stability: Not stable (route changes observed in 30-day window)
• Route Changes (30d): 0
• RPKI State: Not evaluated
• IRR Consistency: Not evaluated
• DNSSEC Valid: Yes
• Has CAA: Yes
• Operator Score: 0.3478 (Basic)

---

## Service Analysis

• Open Ports: None detected
• TLS Certificate: Not present
• HTTP Title: Not detected
• Server Banner: None
• Certificates: 0 certificates found

The IP does not expose services on common ports, consistent with Google Cloud infrastructure hosting services behind firewalls.

---

## Recommended Actions

Current Risk Level: Low (25/100)

Based on the risk profile, the following actions are recommended:

1. Firewall Rules: No specific blocking required. Standard allow rules for legitimate Google Cloud traffic patterns apply.

2. Monitoring: Continue standard log monitoring. No elevated threat signals warrant special attention.

3. Allow List Consideration: IP may be added to an allow list for Google Cloud infrastructure if whitelisting is practiced.

4. Re-evaluation Trigger: Monitor for any changes in risk score, new blacklist entries, or observed malicious behavior.

---

## Conclusion

IP 35.195.132.247 is confirmed Google Cloud infrastructure with a low-risk profile. No malicious indicators, blacklist entries, or suspicious behavior patterns were detected. SOC analysts should treat this as benign infrastructure traffic. Continue standard network monitoring practices without elevated alerting.

Final Risk Rating: LOW

Confidence Level: HIGH

Action Required: None (standard monitoring)

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.