# IP Intelligence Briefing: 35.195.205.169/32
Classification: Low Risk โ Google Cloud Infrastructure
---
## Executive Summary
IP address 35.195.205.169 is identified as a Google Cloud compute instance (AS396982) with an overall Low Risk reputation and risk score of 0. The address is associated with GOOGLE-CLOUD infrastructure in Belgium and demonstrates standard operational characteristics consistent with legitimate cloud hosting services. No threat indicators or malicious activity were observed.
---
## Infrastructure Profile
| Attribute | Value |
|---|---|
| **Organization** | Google LLC |
| **ASN** | 396982 (GOOGLE-CLOUD) |
| **CIDR Block** | 35.192.0.0/12 |
| **Infrastructure Type** | CloudCompute |
| **Country/Region** | Belgium (BE), St. Ghislain, WAL |
| **Network Role** | Single-Service Host, Cloud Hosting |
---
## Technical Observations
DNS & Network Resolution:
- PTR Hostname: 169.205.195.35.bc.googleusercontent.com
- Forward Resolution: Confirmed to googleusercontent.com domain
- DNSSEC: Valid
- Forward Resolution Count: 1
Open Services:
- Port 22/TCP: SSH (OpenSSH_9.9)
Control Plane Data:
- Origin ASN: 396982
- BGP Prefix: 35.195.192.0/20
- Route Stability: Not stable
- DNSBL Listings: 0/8
- Operator Score: 0.1304 (Minimal)
---
## Threat Indicators
Assessment: No threats detected
| Indicator | Status |
|---|---|
| Known Attacker | No |
| Spam Source | No |
| Tor Exit Node | No |
| Threat Feeds | None |
| Blacklist Count | 0 |
| Known Campaigns | None |
| Certificate Matches | 0 |
---
## Historical Analysis
Observation Window: 18 signals over recent period
Temporal Indicators:
- Ownership Changes: 0
- Threat Persistence: 0 days
- Threat Observation Count: 0
- Persistently Malicious: False
Recent Signal Types:
- Ownership/registration validation
- Port scanning activity (SSH, HTTP)
- Geolocation inference (St. Ghislain, Belgium)
- RTT measurements (avg 95ms, min 94ms)
- AlienVault OTX correlation (AS396982 google)
---
## Neighborhood Analysis
Subnet: 35.195.205.0/24
| Metric | Value |
|---|---|
| Neighbor Count | 0 |
| Abuse Density | 0 |
| High-Risk Neighbors | 0 |
| Medium-Risk Neighbors | 0 |
| Low-Risk Neighbors | 0 |
No neighboring IPs identified within the /24 subnet.
---
## Relationship Graph
Connected Entities:
- Network: GOOGLE-CLOUD (multiple entries)
- Hostname: 169.205.195.35.bc.googleusercontent.com (DNS association)
All 9 relationship entries map to Google Cloud network infrastructure and associated hostnames.
---
## Security Recommendations
Action: No specific firewall rules or blocking actions recommended
The IP address demonstrates a benign profile consistent with legitimate Google Cloud infrastructure operations. Standard cloud security practices apply.
---
## Analyst Notes
- This IP represents Google Cloud Platform compute infrastructure with standard SSH access enabled
- Geographic data indicates Belgium deployment with 150km accuracy radius
- No correlation with known threat campaigns or malicious activity
- Operational characteristics (RTT, DNSSEC, SPF/DMARC) align with legitimate cloud services
- Recommend monitoring if this IP begins exhibiting anomalous behavior patterns outside established Google Cloud operational norms
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGLE-CLOUD |
| CIDR Block | 35.192.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | 169.205.195.35.bc.googleusercontent.com |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | 169.205.195.35.bc.googleusercontent.com |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 24% | 2 | 2 |
| routing | 17% | 1 | 1 |
| services | 24% | 2 | 2 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 35% | 2 | 3 |
| Overall | 25% | 10 | 13 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-08-01 04:25:45 UTC |
| Last Seen | 2026-08-13 02:26:21 UTC |
| Profile Built | 2026-08-13 02:43:31 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 25 |
Full dossier details are available via our API.