35.196.61.247📋 Copy

# IP Intelligence Briefing: 35.196.61.247/32

Classification: LOW RISK — Google Cloud Infrastructure

Generated: Based on IPDebrief intelligence platform data

Date: Current analysis

---

## Executive Summary

IP address 35.196.61.247 is a Google Cloud Compute infrastructure endpoint registered under Google LLC (ASN 396982). The IP demonstrates a low-risk profile with a risk score of 25/100. No active threat indicators, blacklist entries, or malicious campaign associations were identified. The address is classified as Google Cloud hosting infrastructure with firewalled/no active services exposed.

---

## Ownership and Infrastructure

The IP originates from the Google Cloud network backbone and is part of a stable BGP route with route stability confirmed. RPKI state and DNSSEC validation are present, indicating proper cryptographic infrastructure configuration.

---

## Geolocation Data

*Note: Multiple geolocation sources report SC location, though minor discrepancies exist between Moncks Corner and North Charleston coordinates in historical observations. All sources indicate US-based deployment.*

---

## Threat Intelligence Assessment

Risk Indicators:

• Risk Score: 25 (Low Risk)
• Abuse Confidence: None detected
• Blacklist Count: 0
• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No

Network Classification Flags:

• Cloud Infrastructure: Yes
• CDN: No
• Proxy/VPN: No
• Mobile/Residential: No
• Bogon: No

DNS Analysis:

• PTR Hostname: 247.61.196.35.bc.googleusercontent.com
• Forward Resolution: Confirmed
• Domain: googleusercontent.com
• DNSBL Listed: 1 of 8 lists (minimal exposure)

---

## Service Exposure

Open Ports: None detected

HTTP/HTTPS: No active services exposed

TLS Certificates: None

Banner Detection: No service banners detected

The IP is configured with no active services exposed, indicating a firewalled posture typical of cloud infrastructure endpoints.

---

## Neighborhood Analysis (35.196.61.0/24)

Neighbor IP: 35.196.61.194 (Risk Score: 25, Authority Score: 90)

The /24 subnet maintains low abuse density with predominantly clean classification. The single active sibling IP shares similar risk characteristics.

---

## Historical Observations

Total Signal Count: 23 observations

Key Historical Signals:

• Recent geolocation data consistently reports US/SC deployment
• Control plane stability maintained with no significant route changes
• DNS and routing indicators show moderate stability
• No emergence of new threat indicators over observation period

Temporal Analysis:

• Ownership Changes: 0
• Threat Persistence Days: 0
• Is Persistently Malicious: No

---

## Relationship Graph

Total Relationships: 33 connections identified

Primary Associations:

• DNS Association: googleusercontent.com hostname mappings
• Network Association: GOOGLE-CLOUD infrastructure
• Multiple hostname and network-level relationships

All relationships point to legitimate Google Cloud infrastructure components.

---

## Recommended Actions

Current Risk Level: Low

Action Recommendations: None required at this time

The IP demonstrates no active malicious behavior or threat indicators. Standard cloud infrastructure handling procedures apply. No specific firewall rules or blocking recommendations are warranted based on current risk assessment.

---

## Intelligence Confidence

• Data Sufficiency: High (23 historical observations, 33 relationship links)
• Risk Assessment: Confident (Low Risk, 25/100)
• Actionability: Monitor as standard Google Cloud infrastructure

---

## Conclusion

IP 35.196.61.247/32 is identified as legitimate Google Cloud hosting infrastructure with no current threat indicators. The address operates within normal cloud compute parameters with proper routing stability and geolocation consistency. SOC teams may classify this as benign cloud infrastructure requiring no special handling beyond standard network policies.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.