35.201.172.32📋 Copy

## IP Intelligence Briefing: 35.201.172.32/32

Date: July 29, 2026

Classification: Low Risk / Clean

Status: Active Monitoring Recommended

---

Executive Summary

IP 35.201.172.32 is a Google Cloud infrastructure address with a risk score of 0. No threat indicators, blacklists, or malicious activity observed. The subnet (35.201.172.0/24) demonstrates zero abuse density. This IP is considered a false positive candidate for threat filtering.

---

Technical Profile

Risk Assessment:

• Risk Score: 0 (Low Risk)
• Provider Score: 0
• Authority Score: 0
• Stability Score: 0

Infrastructure Identification:

• Provider: Google Cloud Platform
• ASN: AS396982 (Google)
• BGP Prefix: 35.201.160.0/20
• Infrastructure Type: Cloud Infrastructure
• Network Role: Firewalled / No Services Detected

Geolocation Data:

• Primary Location: US, New York (US-NY)
• Secondary Signals: Taiwan/Taipei (geo-validation inconsistency)
• Note: Geographic inconsistencies common with cloud infrastructure utilizing anycast routing. Multiple geolocation databases report conflicting origins.

DNS Resolution:

• PTR Record: 32.172.201.35.bc.googleusercontent.com
• Domain: googleusercontent.com
• Forward Resolution: Confirmed
• DNSSEC: Valid
• CAA Records: Present

---

Service Analysis

Open Ports: None detected

HTTP/HTTPS: No services running

TLS Certificates: None observed

Banner Grabbing: No server banners captured

Status: Port 80/443 and common ports blocked or not responding

---

Neighborhood Analysis

Subnet: 35.201.172.32/24

• Abuse Density: 0.00%
• Classification: Clean
• High Risk Neighbors: 0
• Medium Risk Neighbors: 0
• Low Risk Neighbors: 0
• Total Siblings: 1
• Active Siblings: 0
• Threat Siblings: 0

Assessment: Subnet shows no malicious activity patterns. Neighbor analysis confirms clean classification.

---

Threat Indicators

Abuse Indicators:

• Blacklist Count: 0
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• VPN/Proxy: No
• Hosting Provider: No (confirmed Google Cloud infrastructure)

Campaign Association:

• Campaign Likelihood: None detected
• Certificate Matches: 0
• Correlated IPs: 0

Threat Persistence:

• Observation Count: 0
• Persistence Days: 0
• Persistently Malicious: No

---

Historical Observations

Observation Count: 16 signals recorded

Recent Activity:

• July 29, 2026 07:35: Subnet classification confirmed clean with 0 abuse density
• July 29, 2026 07:35: ASN AS396982 (Google) reported with no threats
• July 29, 2026 07:35: Provider confirmed as Google Cloud
• July 29, 2026 07:36: TLS/HTTP scanning detected no open ports or services

Trend Analysis: No escalation in risk profile. Consistent low-risk classification maintained across observation window.

---

Relationships Graph

DNS Association:

• Target: 32.172.201.35.bc.googleusercontent.com
• Type: Reverse DNS

No Additional Relationships: No organizational, certificate, or subnet relationships detected beyond DNS infrastructure.

---

Recommended Actions

SOC Analyst Guidance:

1. No Blocking Required: IP demonstrates legitimate Google Cloud infrastructure behavior

2. Monitor for Changes: Track for any deviation from clean classification

3. Geo-Validation: Acknowledge location inconsistencies as expected for cloud infrastructure

4. Allow Traffic: No firewall rules recommended; traffic should pass normal inspection

Action Score: 0 (No action required)

---

Control Plane Data

• Route Stability: False
• Route Changes (30d): 0
• RPKI State: Not verified
• IRR Consistency: Not verified
• DNSSEC Valid: Yes
• Has CAA: Yes
• Operator Score: 0.3478 (Basic)

---

Conclusion: IP 35.201.172.32 is a benign Google Cloud infrastructure endpoint with no malicious indicators. No security actions recommended.

Generated by: IPDebrief Intelligence Platform

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.