# IP Intelligence Briefing: 35.196.211.118/32
Classification: Cloud Infrastructure | Risk Level: Low | Date: Current
## Executive Summary
IP 35.196.211.118 is identified as Google Cloud infrastructure (ASN 396982) located in Moncks Corner, SC, US. The IP presents a low-risk profile with no active threat indicators, no open ports, and no blacklist associations. The address resolves to googleusercontent.com, consistent with Google Cloud's content delivery infrastructure. No immediate defensive actions are recommended; however, analysts should monitor associated traffic patterns.
## Ownership and Network Classification
- Organization: Google LLC (GOOGLE-CLOUD)
- ASN: 396982
- Network Block: 35.192.0.0/12
- Geolocation: Moncks Corner, SC, US (33.21°N, 80.17°W)
- DNS Resolution: 118.211.196.35.bc.googleusercontent.com
- Email Authentication: SPF and DMARC records present
## Threat Indicators
- Risk Score: 0 (Low Risk)
- Abuse Confidence: None
- Blacklist Status: Clean (0 lists)
- Known Attack Source: No
- Tor Exit Node: No
- Spam Source: No
- Active Threat Campaigns: None
## Network Role and Services
- Infrastructure Type: Unknown
- Open Ports: None detected
- Service Purpose: Firewalled / No Services
- TLS Certificate: None
- HTTP Banner: None
## Neighborhood Analysis
The /24 subnet (35.196.211.0/24) shows minimal abuse activity:
- Abuse Density: 0
- Total Siblings: 1 neighbor identified
- Neighbor IP: 35.196.211.121 (Risk Score: 25, Authority Score: 90)
- Threat Siblings: 0
## Historical Signals
Analysis of 18 historical observations reveals:
- Classification Trend: "Mostly clean" subnet classification
- Abuse Density: 0.5 (baseline)
- Ownership Stability: No changes detected
- Threat Persistence: None
- Not Persistently Malicious: Confirmed
## Control Plane Assessment
- Route Stability: Unstable (isRouteStable: false)
- Route Changes (30d): 0
- BGP Prefix: 35.196.208.0/20
- DNSSEC: Valid
- CAA Records: Present
- Operator Score: 0.3478 (Basic)
## Recommended Actions
No firewall or blocking rules are recommended at this time. The IP presents no immediate threat. However, analysts should:
1. Monitor traffic patterns for the associated neighbor (35.196.211.121), which shows elevated authority signals
2. Verify expected traffic volumes from Google Cloud infrastructure
3. Review any anomalous traffic claims against this IP with contextual evidence
## Intelligence Confidence
High confidence in classification as legitimate Google Cloud infrastructure. No malicious activity observed in current or historical data.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGLE-CLOUD |
| CIDR Block | 35.192.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 118.211.196.35.bc.googleusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 118.211.196.35.bc.googleusercontent.com |
π DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 3 |
| routing | 27% | 2 | 3 |
| services | 19% | 2 | 2 |
| ownership | 30% | 3 | 4 |
| reputation | 15% | 1 | 2 |
| geolocation | 13% | 1 | 1 |
| Overall | 22% | 11 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-07-23 20:05:52 UTC |
| Last Seen | 2026-08-12 18:08:56 UTC |
| Profile Built | 2026-08-12 18:11:35 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 26 |
Full dossier details are available via our API.