## IP INTELLIGENCE BRIEFING
Target IP: 35.196.100.23/32
Analysis Date: Current
Classification: LOW RISK
---
EXECUTIVE SUMMARY
IP 35.196.100.23 is identified as low-risk infrastructure belonging to Google LLC. The address operates within Google Cloud's network (ASN 396982) in North Charleston, South Carolina. No threat indicators, malicious activity, or abuse signals have been detected. No defensive firewall actions are recommended based on current intelligence.
---
OWNERSHIP & INFRASTRUCTURE
- Organization: Google LLC
- AS Number: 396982 (GOOGLE-CLOUD)
- CIDR Block: 35.192.0.0/12
- Registration Authority: ARIN
- Infrastructure Type: Cloud provider infrastructure
- Geolocation: North Charleston, South Carolina, US (2,500 km accuracy radius)
The IP is part of Google's cloud provider network and exhibits characteristics of legitimate cloud infrastructure. Reverse DNS resolves to `23.100.196.35.bc.googleusercontent.com`.
---
RISK ASSESSMENT
| Metric | Value |
|---|---|
| Overall Risk Score | 25/100 |
| Provider Score | 0/100 |
| Authority Score | 0/100 |
| Stability Score | 0/100 |
| Abuse Confidence Score | N/A |
Risk Breakdown: The low risk score reflects the IP's classification as cloud provider infrastructure with no observed malicious behavior.
---
THREAT INTELLIGENCE
Threat Indicators:
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- Blacklist Count: 0
- Known Campaigns: None
- Threat Persistence: 0 days
Evidence Status: No threat indicators present across all monitored feeds.
---
NETWORK BEHAVIOR
Open Ports/Services: None detected (firewalled/no services)
DNS Configuration:
- Forward resolution confirmed
- PTR hostname: `23.100.196.35.bc.googleusercontent.com`
- DNSSEC: Valid
Control Plane:
- BGP Prefix: 35.196.96.0/20
- Route Stability: False
- DNSBL Listed: 1 of 8 total lists
---
TEMPORAL ANALYSIS
Observation History: 21 total observations recorded
- Recent activity shows consistent low-risk behavior
- No ownership changes detected
- No persistent malicious patterns observed
- Threat observation count: 0
---
NEIGHBORHOOD ANALYSIS
Subnet: 35.196.100.0/24
- Abuse Density: 0%
- Classification: Clean
- Total Siblings: 1
- Active Siblings: 1
- Threat Siblings: 0
The /24 subnet shows no abuse activity, supporting the low-risk classification of this address.
---
RELATIONSHIP MAPPING
All 12 identified relationships link back to:
- Network: GOOGLE-CLOUD (Same Network type)
- Hostname: 23.100.196.35.bc.googleusercontent.com (DNS Association type)
No external or suspicious associations detected.
---
SECURITY ACTIONS
Recommended Actions: None
- Risk score below actioning threshold
- No firewall rules required
- No WAF blocking recommended
Note: This IP represents legitimate Google Cloud infrastructure. Standard monitoring is sufficient. No blocking or filtering actions are warranted.
---
INTELLIGENCE CONCLUSION
IP 35.196.100.23/32 is classified as LOW RISK. It is part of Google Cloud's infrastructure with no evidence of malicious activity, abuse, or threat association. The IP exhibits expected behavior for cloud provider infrastructure and requires standard monitoring rather than defensive actions.
---
Status: CLEAR
Recommended Action: Monitor only
Next Review: Standard cycle
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGLE-CLOUD |
| CIDR Block | 35.192.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 23.100.196.35.bc.googleusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 23.100.196.35.bc.googleusercontent.com |
π DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | 1/4 domains |
| DMARC | 1/4 domains |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
| Domains Checked | 4 domains |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | β |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | kuberneteskubernetes.defaultkubernetes.default.svckubernetes.default.svc.cluster.local |
| Valid From | 2026-08-06T21:32:22+00:00 |
| Valid Until | 2031-08-05T21:34:22+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 1825 days |
| Serial Number | 56E4525FA7709FF66FCF2B8164922B83 |
| Thumbprint | 650AF987323D39AE34A1EBADAC837E44A573D0E6 |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 15% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 23% | 10 | 14 |
| Data Coherence | Mostly Consistent (80%) β 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-07-29 16:42:04 UTC |
| Last Seen | 2026-08-12 23:53:34 UTC |
| Profile Built | 2026-08-13 00:16:35 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 26 |
Full dossier details are available via our API.