# IP Intelligence Briefing: 35.197.16.112/32
Date: 2026-08-13
Classification: Cloud Infrastructure - Low Risk
## Executive Summary
IP address 35.197.16.112 is identified as Google Cloud infrastructure with a low risk profile. No active threat indicators or malicious behavior were detected during analysis. The IP is properly registered, stable, and operates within Google's allocated address space.
## Ownership and Network Classification
| Field | Value |
|---|---|
| **ASN** | 396982 |
| **Organization** | Google LLC |
| **Network Name** | GOOGLE-CLOUD |
| **CIDR Block** | 35.192.0.0/12 |
| **RIR** | ARIN |
| **Abuse Contact** | google-cloud-compliance@google.com |
| **Risk Score** | 25 (Low Risk) |
| **Provider Score** | 0 |
| **Authority Score** | 0 |
## Geolocation
- Country: United States (US)
- Region: Oregon (OR)
- City: The Dalles
- Coordinates: 45.6°N, -121.19°W
- Timezone: America/Los_Angeles
- Geo Validation: ICMP validation blocked (typical for cloud infrastructure)
## DNS Resolution
- PTR Hostname: 112.16.197.35.bc.googleusercontent.com
- Forward Resolution: 112.16.197.35.bc.googleusercontent.com
- Domain: googleusercontent.com
- Forward Resolution Count: 1
## Network Infrastructure
- Infrastructure Type: Google Cloud Platform
- Open Ports: None detected
- Service Purpose: Firewalled / No Services
- Connection Type: Cloud infrastructure
- TLS Certificate: None detected
- HTTP Title: None detected
## Threat Assessment
| Indicator | Status |
|---|---|
| **Is Tor Exit** | No |
| **Is Known Attacker** | No |
| **Is Spam Source** | No |
| **Blacklist Count** | 0 |
| **Abuse Confidence Score** | Not detected |
| **Known Campaigns** | None |
| **DNSBL Listed** | 1 of 8 lists |
| **Threat Persistence Days** | 0 |
| **Is Persistently Malicious** | No |
## Service Status
| Service | Status |
|---|---|
| **Open Ports** | None |
| **TLS Certificate** | None |
| **HTTP Title** | None |
| **Server Banner** | None |
| **Certificates** | None |
## Historical Observations
Analysis of 16 signal observations confirms consistent behavior:
- Ownership Stability: No ownership changes detected
- Geolocation Consistency: The Dalles, OR consistently identified
- Service Activity: No service scanning or port exposure detected
- Threat Activity: No malicious signals observed over observation period
## Relationships and Associations
| Type | Target |
|---|---|
| DNS Association | 112.16.197.35.bc.googleusercontent.com |
| Same Network | GOOGLE-CLOUD |
| DNS Association | 112.16.197.35.bc.googleusercontent.com |
## Neighborhood Analysis
- Subnet: 35.197.16.112/24
- Neighbor Count: 0
- Abuse Density: 0
- High Risk Neighbors: 0
- Medium Risk Neighbors: 0
- Low Risk Neighbors: 0
- Threat Siblings: 0
## Security Recommendations
Risk Score: 25 (Low Risk)
Recommendations: None required
Given the low risk profile and confirmed cloud infrastructure classification, no firewall rules or blocking actions are recommended. The IP exhibits normal behavior for Google Cloud Platform services.
Note: This analysis indicates legitimate cloud hosting infrastructure. Standard monitoring protocols should apply. No immediate containment or blocking actions are warranted.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGLE-CLOUD |
| CIDR Block | 35.192.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 112.16.197.35.bc.googleusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 112.16.197.35.bc.googleusercontent.com |
π DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-08-06 18:56:12 UTC |
| Last Seen | 2026-08-27 12:37:34 UTC |
| Profile Built | 2026-08-29 04:28:18 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 23 |
Full dossier details are available via our API.