# THREAT INTELLIGENCE BRIEFING
Target IP: 35.199.178.21/32
Classification: Google Cloud Infrastructure
Risk Assessment: LOW RISK
## EXECUTIVE SUMMARY
IP 35.199.178.21 is a Google Cloud infrastructure endpoint classified as low risk. The IP demonstrates no malicious indicators, maintains a clean threat profile, and shows consistent operational behavior over the observation period. No defensive action is currently required.
## KEY FINDINGS
Network Identity
- Organization: Google LLC
- ASN: 396982 (GOOGLE-CLOUD)
- CIDR Block: 35.192.0.0/12
- Infrastructure Type: Cloud provider infrastructure
- Network Role: Firewalled / No Services
Geolocation
- Country: United States (US)
- Region: Oregon (OR)
- City: The Dalles
- Coordinates: 45.6°N, -121.18°W
- Validation: GeoPlausible confirmed
DNS Resolution
- PTR Hostname: 21.178.199.35.bc.googleusercontent.com
- Domain: googleusercontent.com
- Forward Confirmation: Validated
- Email Auth: SPF and DMARC configured
Threat Indicators
- Risk Score: 0
- Abuse Confidence Score: N/A (no abuse data)
- Blacklist Status: Clean (0 lists)
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- Campaign Association: None detected
Neighborhood Analysis
- Subnet: 35.199.178.21/24
- Abuse Density: 0 (clean classification)
- Threat Siblings: 0
- Active Siblings: 1
## OBSERVATION HISTORY
Total Observations: 22
- Consistent Geolocation: The Dalles, OR, US maintained across all observations
- Provider Classification: Stable Google Cloud identification
- Risk Profile: No significant changes in threat posture over time
- Operator Score: 0.3478 (Basic operator classification)
## TECHNICAL SERVICES
- Open Ports: None detected
- HTTP Services: No active web services
- TLS Certificates: None detected
- Server Banner: No service banners available
## RECOMMENDATIONS
Current Action: No firewall rules or blocking recommended. The IP represents legitimate Google Cloud infrastructure with no malicious indicators.
Monitoring: Standard logging sufficient. No enhanced monitoring required at this time.
Related Entities:
- Network: GOOGLE-CLOUD (repeated associations)
- Hostname: 21.178.199.35.bc.googleusercontent.com
## CONCLUSION
This IP address represents benign Google Cloud infrastructure. The low risk score, absence of threat indicators, clean neighborhood classification, and consistent operational history indicate legitimate use. SOC teams may treat this IP as trusted infrastructure.
---
*Report generated from IPDebrief intelligence platform data.*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGLE-CLOUD |
| CIDR Block | 35.192.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 21.178.199.35.bc.googleusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 21.178.199.35.bc.googleusercontent.com |
π DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 15% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 21% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-07-26 15:20:42 UTC |
| Last Seen | 2026-08-12 20:45:20 UTC |
| Profile Built | 2026-08-12 21:14:55 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 31 |
Full dossier details are available via our API.