35.195.85.179📋 Copy

IP Intelligence Briefing: 35.195.85.179/32

Date: 2026-06-04

Overview:

• Risk Score: 15 (Low Risk)
• Ownership: Google LLC (ASN 396982)
• Geolocation: Belgium (St. Ghislain), but registered to the U.S.
• Network Role: Google Cloud Compute instance (firewalled, no open services)
• Threat Indicators: No malicious activity detected; no DNS-based threats or spam sources.

Key Findings:

1. Legitimate Infrastructure:

- The IP is associated with Google Cloud infrastructure, classified as a "CloudCompute" node.

- No open ports, TLS certificates, or HTTP services detected, consistent with a firewalled cloud instance.

2. Geolocation Discrepancy:

- While geolocated to Belgium, the IP is registered to Google (U.S.), suggesting potential spoofing or misattribution.

3. Observation History:

- A single observation from 2026-06-04 flagged ambiguous "malicious activity" in a truncated report. Further investigation is required to validate this claim.

4. Network Relationships:

- Linked to Google's `googleusercontent.com` DNS domain, consistent with cloud service provider activity.

- No peer IPs in the /24 subnet (neighbors tool returned zero results).

Recommendations:

• Monitor: Track the IP for changes in threat indicators or network behavior.
• Verify: Cross-check the "malicious activity" flag with additional sources due to incomplete data.
• No Action Required: Current risk profile and network role indicate no immediate security impact.

Conclusion:

This IP is likely a legitimate Google Cloud instance with no confirmed malicious activity. The SOC team should prioritize monitoring for anomalies while avoiding unnecessary blocking of Google infrastructure.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.