## IPDEBRIEF INTELLIGENCE BRIEFING
Target: 35.196.110.156/32
Classification: Low Risk / Google Cloud Infrastructure
Report Date: Current
EXECUTIVE SUMMARY
IP 35.196.110.156 is a low-risk Google Cloud infrastructure endpoint with no active threat indicators. The address resolves to Google's content delivery infrastructure and exhibits benign network behavior across all observation periods.
OWNERSHIP & INFRASTRUCTURE
- Organization: Google LLC (Google Cloud Platform)
- ASN: AS396982 (google)
- CIDR Block: 35.196.96.0/20
- Network Classification: Cloud Infrastructure / Firewalled (No Active Services)
- Reverse DNS: 156.110.196.35.bc.googleusercontent.com
- Forward DNS: Confirmed resolution to googleusercontent.com domain
GEOLOCATION
- Primary Location: North Charleston, South Carolina, United States
- RIR: ARIN
- Abuse Contact: google-cloud-compliance@google.com
- Geographic Consensus: Multiple sources confirm US-based hosting
THREAT ASSESSMENT
- Risk Score: 0 (Low Risk)
- Abuse Confidence: None detected
- Blacklist Status: Not listed on any threat feeds
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Campaign Association: No correlated campaigns detected
- Malware Persistence: Not persistently malicious
SERVICE PROFILE
- Open Ports: None detected
- HTTP/HTTPS Services: None exposed
- TLS Certificates: None observed
- Server Banner: No active services detected
- Service Purpose: Firewall protected / No active services
NEIGHBORHOOD ANALYSIS (35.196.110.0/24)
- Subnet Abuse Density: 0 (Minimal)
- Total Siblings: 1 active neighbor identified
- Neighbor IP: 35.196.110.154
- Risk Score: 25 (Low-Medium)
- Authority Score: 90
- Subnet Classification: Low Risk
- Threat Siblings: 0
OBSERVATION HISTORY
- Total Observations: 14 signals tracked
- Most Recent Data: 2026-07-30
- Ownership Stability: Consistent Google Cloud attribution
- Threat Persistence: None observed
- Route Stability: BGP prefix shows minor instability
- Operator Score: 0.3478 (Basic classification)
CONTROL PLANE DATA
- RPKI State: Valid
- DNSSEC: Valid
- CAA Records: Present
- DNSBL Lists: 0 listings out of 8 checked
- Route Changes (30d): 0
RECOMMENDED ACTIONS
No immediate security actions required. Standard monitoring recommended. The IP represents legitimate Google Cloud infrastructure with no malicious indicators.
ANALYST NOTES
This IP address is part of Google's public cloud infrastructure. The absence of open services and the presence of reverse DNS pointing to Google's infrastructure domain indicates this is likely a backend or reserved address. The neighbor IP (35.196.110.154) shows elevated authority score (90) which is typical for well-established cloud infrastructure. No defensive firewall rules are recommended at this time.
Status: Monitor / No Action Required
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGLE-CLOUD |
| CIDR Block | 35.192.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 156.110.196.35.bc.googleusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 156.110.196.35.bc.googleusercontent.com |
π DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | 1/4 domains |
| DMARC | 1/4 domains |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
| Domains Checked | 4 domains |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | β |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | kuberneteskubernetes.defaultkubernetes.default.svckubernetes.default.svc.cluster.local |
| Valid From | 2026-08-10T03:55:59+00:00 |
| Valid Until | 2031-08-09T03:57:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 1825 days |
| Serial Number | 6A599950ED44E7EC4968AA8399D58772 |
| Thumbprint | 47100EF46C43D8AF0F3CD4AC1FBD2F7E8D501761 |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 31% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 21% | 2 | 2 |
| ownership | 30% | 2 | 3 |
| reputation | 28% | 1 | 3 |
| geolocation | 27% | 2 | 3 |
| Overall | 25% | 10 | 16 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-07-28 22:22:27 UTC |
| Last Seen | 2026-08-12 22:59:14 UTC |
| Profile Built | 2026-08-12 23:11:49 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 28 |
Full dossier details are available via our API.