# IP Intelligence Briefing: 35.200.78.20/32
## Executive Summary
The target IP address 35.200.78.20 is a low-risk infrastructure endpoint hosted on Google Cloud infrastructure. No active threat indicators were observed, and the IP shows no association with known malicious campaigns or abuse activity.
## Risk Assessment
Overall Risk Score: 25 (Low Risk)
Provider Risk: 0
Authority Risk: 0
The IP demonstrates stable ownership characteristics with no observed malicious activity. Risk scoring indicates this is infrastructure within a legitimate cloud provider environment.
## Ownership and Geolocation
- Organization: Google LLC
- ASN: AS396982
- Network: GOOGLE-CLOUD (35.192.0.0/12)
- Geolocation: Tokyo, Japan (JP)
- Registration: ARIN
DNS resolution confirms the address resolves to `20.78.200.35.bc.googleusercontent.com`, consistent with Google Cloud infrastructure naming conventions.
## Network Classification
- Infrastructure Type: Cloud (Google Cloud)
- Open Ports: None detected
- Status: Firewalled / No Services
- IsTor: No
- IsKnownAttacker: No
- IsSpamSource: No
- Blacklist Count: 0
## Threat Indicators
No threat indicators were identified. The IP shows:
- No abuse confidence score
- No known campaigns
- No threat feed matches
- Zero blacklist entries
## Historical Analysis
The observation history contains 15 data points from recent monitoring. Ownership remained consistent as Google LLC throughout the observation period. Geolocation signals showed some variance between United States and Tokyo, JP sources with differing confidence levels, but this is consistent with Google Cloud's global infrastructure distribution.
No threat persistence days were observed, and the IP is not flagged as persistently malicious.
## Network Neighborhood
The /24 subnet (35.200.78.20/24) shows:
- Abuse Density: 0
- Active Siblings: 0
- Threat Siblings: 0
No neighboring IPs were detected, indicating this is likely a standalone infrastructure endpoint.
## Relationships
DNS associations link the IP to `20.78.200.35.bc.googleusercontent.com`. The IP shares network classification with GOOGLE-CLOUD infrastructure.
## Recommended Actions
No firewall rules or mitigation actions are recommended. The low risk score and absence of threat indicators support normal traffic handling. Continue standard monitoring practices.
## SOC Analyst Notes
This IP represents legitimate Google Cloud infrastructure. No blocking or restriction is warranted. Monitor for any changes in behavior or ownership that would alter the risk profile.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGLE-CLOUD |
| CIDR Block | 35.192.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | 20.78.200.35.bc.googleusercontent.com |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | 20.78.200.35.bc.googleusercontent.com |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 16% | 4 | 4 |
| Data Coherence | Mostly Consistent (80%) โ 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-08-08 01:26:54 UTC |
| Last Seen | 2026-08-30 17:39:31 UTC |
| Profile Built | 2026-08-29 03:37:17 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 25 |
Full dossier details are available via our API.