35.195.241.97📋 Copy

# IP Intelligence Briefing: 35.195.241.97/32

## Executive Summary

Threat Level: LOW RISK

Classification: Legitimate Google Cloud Infrastructure

Recommendation: Standard monitoring; no immediate action required

---

## Technical Profile

IP Address: 35.195.241.97/32

Risk Score: 25/100 (Low Risk)

Organization: Google LLC (ASN 396982)

Geolocation: Brussels, Belgium (BE) – 50.45°N, 3.82°E

Network Type: Cloud Compute Infrastructure (Google Cloud Platform)

Infrastructure Status: Firewalled / No Services Detected

---

## Network Characteristics

• CIDR Block: 35.195.240.0/20 (BGP Prefix)
• Route Stability: Stable (no route changes in 30 days)
• DNS Records: 97.241.195.35.bc.googleusercontent.com
• Domain Association: googleusercontent.com
• Reverse DNS: Confirmed (97.241.195.35.bc.googleusercontent.com)
• Open Ports: None detected
• Services: No active services (firewalled configuration)

---

## Threat Indicators Assessment

Active Threats: None detected

Blacklist Presence: 0 blacklists (1 DNSBL listing noted, total 8)

Campaign Associations: No correlated campaigns identified

Tor Exit Node: False

Known Attacker: False

Spam Source: False

Abuse Confidence Score: Not applicable (infrastructure-based IP)

---

## Neighborhood Analysis

Subnet: 35.195.241.97/24

Abuse Density: 1 (minimal)

Classification: Mostly Clean

Active Siblings: 0

Threat Siblings: 1 (historical, not current)

Risk Distribution: High: 0, Medium: 0, Low: 0

---

## Observation History

Total Observations: 24 signals

Timeframe: May–June 2026

Key Findings:

• Consistent geolocation data confirming Brussels, Belgium
• Routing signals showing "Moderate" operator score (0.5652)
• DNSSEC and CAA records valid
• No emergence of malicious behavior
• Ownership stable with no changes detected

---

## Relationship Graph

Total Relationships: 33 entities

DNS Associations: googleusercontent.com hostnames

Network Relationships: GOOGLE-CLOUD infrastructure

Correlated IPs: 0 correlated threat IPs

---

## SOC Actionable Recommendations

Firewall Configuration

• Default Action: Allow (legitimate cloud infrastructure)
• Port Filtering: No specific port rules required (no open services)
• Rate Limiting: Not required

Monitoring Parameters

• Traffic Volume: Monitor for anomalous traffic patterns
• Geographic Consistency: Verify traffic originates from expected EU regions
• DNS Queries: Standard monitoring for googleusercontent.com

Alerting Thresholds

• Block Trigger: Not applicable (low-risk infrastructure)
• Investigate: Only if behavior deviates from established baselines

---

## Intelligence Conclusion

IP 35.195.241.97 represents legitimate Google Cloud infrastructure with no active threat indicators. The IP is part of a clean subnet (abuse density 1) with stable routing and consistent geolocation. No immediate defensive actions required. Standard cloud infrastructure monitoring protocols apply.

Report Generated: IPDebrief Intelligence Platform

Data Sources: Full profile, observation history, relationship graph, neighborhood analysis

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.