35.196.35.160📋 Copy

## IP Intelligence Briefing: 35.196.35.160/32

Classification: Low Risk / Legitimate Infrastructure

Executive Summary

IP 35.196.35.160 is a Google Cloud Platform infrastructure address with low risk characteristics (risk score: 25). The IP demonstrates no malicious indicators, no blacklist entries, and maintains a clean neighborhood profile. Operational status: Firewalled with no active services.

Ownership & Infrastructure

• Organization: Google LLC
• ASN: 396982 (GOOGLE-CLOUD)
• Network Block: 35.192.0.0/12
• Location: US, South Carolina (North Charleston)
• Geolocation Confidence: Validated (geoPlausible: true)

Threat Assessment

• Risk Score: 25 (Low Risk)
• Blacklist Count: 0
• Abuse Confidence: None
• Known Campaigns: None
• Tor/Proxy Status: Negative (not Tor exit, proxy, or hosting provider)
• Known Attacker: No

Network Services & DNS

• Open Ports: None (firewalled)
• Reverse DNS: 160.35.196.35.bc.googleusercontent.com
• Forward Resolution: Confirmed
• DNSSEC: Valid
• HTTP/HTTPS: No services exposed

Neighborhood Analysis

• Subnet: 35.196.35.0/24
• Abuse Density: 0% (clean classification)
• Threat Siblings: 0
• Active Siblings: 1

Historical Observations

Recent signal history (20 observations) shows:

• No ownership changes
• No persistent threat patterns
• No threat observation count
• Geographic signals consistently point to US infrastructure
• Route stability: Minor fluctuations detected (isRouteStable: false)

Relationships

• Network Association: GOOGLE-CLOUD
• DNS Hostnames: Multiple associations to googleusercontent.com
• No cross-network or cross-organization relationships detected

Recommended Actions

No blocking or filtering actions recommended. The IP exhibits legitimate cloud infrastructure characteristics with no threat indicators. If traffic from this IP is observed:

• Allow: Standard traffic (infrastructure IP)
• Monitor: If unusual patterns emerge (not currently indicated)
• No Block: Risk profile does not warrant defensive action

SOC Notes

This is a standard Google Cloud Platform IP with firewalled access. The 35.196.0.0/16 block is part of Google's public cloud infrastructure. No correlation with known threat actors or campaigns. Routine observation only.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.