# IP Intelligence Briefing: 35.197.97.166/32
Classification: Low Risk β Legitimate Infrastructure
Date: 2026-08-13
Analyst: IPDebrief Intelligence Team
---
## Executive Summary
IP 35.197.97.166 is a Google Cloud infrastructure address with no threat indicators detected. The IP exhibits benign characteristics consistent with cloud service provider operations. No immediate defensive action required.
---
## Ownership & Network Context
- Organization: Google LLC (GOOGLE-CLOUD)
- ASN: AS396982
- CIDR Block: 35.192.0.0/12
- Geolocation: United States, Oregon (The Dalles)
- RIR: ARIN
- Infrastructure Type: Cloud provider (Google Cloud Platform)
---
## Threat Assessment
| Metric | Value | Status |
|---|---|---|
| Risk Score | 0 | None |
| Abuse Confidence | N/A | N/A |
| Blacklist Count | 0 | Clean |
| Tor Exit Node | No | N/A |
| Known Attacker | No | N/A |
| Spam Source | No | N/A |
Threat Indicators: None detected across all monitored threat feeds.
---
## Network Behavior
- Service Exposure: No open ports detected
- Connection Type: Firewalled / No Services
- DNS Resolution: 166.97.197.35.bc.googleusercontent.com (confirmed)
- Anycast: No
- Mobile/Residential: No
---
## Temporal Analysis
- Observation History: 16 signals over monitoring period
- Ownership Changes: None
- Threat Persistence: 0 days
- Status: Stable, no recent behavioral changes
---
## Neighborhood Analysis
- Subnet: 35.197.97.166/24
- Sibling IPs: 0 active neighbors
- Subnet Abuse Density: 0
- Threat Siblings: 0
---
## Related Entities
- DNS Associations: 166.97.197.35.bc.googleusercontent.com
- Network Association: GOOGLE-CLOUD (35.197.96.0/20)
- Campaign Correlations: None
---
## Recommended Actions
No defensive action required. The IP demonstrates legitimate cloud infrastructure behavior with no malicious indicators. Standard monitoring applies.
---
## SOC Analyst Notes
This IP represents standard Google Cloud infrastructure. No firewall rules or blocking measures are warranted. If this IP appears in traffic analysis, it should be treated as legitimate traffic from Google's cloud services.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGLE-CLOUD |
| CIDR Block | 35.192.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 166.97.197.35.bc.googleusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 166.97.197.35.bc.googleusercontent.com |
π DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 36% | 2 | 5 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 22% | 1 | 3 |
| geolocation | 27% | 2 | 3 |
| Overall | 24% | 10 | 17 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-08-08 01:26:54 UTC |
| Last Seen | 2026-08-30 16:44:47 UTC |
| Profile Built | 2026-08-30 16:45:49 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 30 |
Full dossier details are available via our API.