35.196.1.238📋 Copy

# IP Intelligence Briefing: 35.196.1.238/32

## Executive Summary

IP 35.196.1.238 is a Google Cloud infrastructure endpoint located in Moncks Corner, SC, USA. The IP presents a low-risk profile (risk score: 25) with no active threat indicators. Classification confirms cloud compute infrastructure with no exposed services.

---

## Ownership & Infrastructure

• Organization: Google LLC (ASN: 396982)
• Network: Google Cloud infrastructure (35.196.0.0/20)
• Infrastructure Type: CloudCompute / Hosting-enabled
• Classification: Cloud-based, firewalled with no open services
• Geolocation: Moncks Corner, South Carolina, US (33.21°N, -80.17°W)

---

## Threat Assessment

Current Risk Level: Low Risk

Control Plane Status:

• Route Stability: Unstable (route changes observed in 30-day window)
• DNSBL Listings: 1 of 8 total lists (dnsblListedCount)
• DNSSEC: Valid
• Operator Score: 0.3478 (Basic)

---

## Network Context & Neighborhood

Subnet Analysis (35.196.1.0/24):

• Abuse Density: 0.5 (low)
• Classification: mostly_clean
• Total Siblings: 2
• Active Siblings: 1
• Threat Siblings: 1

Neighbor Alert:

• 35.196.1.179: Risk Score 50, Authority Score 90 (medium risk)

---

## DNS & Service Analysis

• Reverse DNS: 238.1.196.35.bc.googleusercontent.com
• Forward Resolution: Confirmed (1 hostname)
• Domain: googleusercontent.com
• Open Ports: None detected
• HTTP Services: None
• TLS Certificates: None

---

## Historical Observation (21 Total Signals)

• Recent Activity: Multiple observations recorded as of 2026-06-20
• Infrastructure Classification: Consistently identified as Google Cloud infrastructure
• Persistence: No persistent malicious behavior detected
• Threat Persistence Days: 0
• Ownership Changes: 0

---

## Relationship Graph

Total relationships: 34

• DNS Associations: Multiple entries pointing to googleusercontent.com hostname
• Network Associations: Multiple GOOGLE-CLOUD network links
• No External Campaign Correlations

---

## Recommended Actions

SOC Analyst Assessment:

This IP represents legitimate Google Cloud infrastructure with no immediate threat indicators. Standard monitoring applies.

Firewall Recommendations:

• No blocking required for legitimate traffic
• Monitor for anomalous outbound connections from internal systems
• Neighbor IP 35.196.1.179 (risk score 50) warrants periodic review

Priority: LOW

Status: Routine monitoring recommended

---

*Intelligence compiled from IPDebrief platform data. All timestamps and metrics sourced from live signal observations.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.