# IP INTELLIGENCE BRIEFING: 35.231.134.207/32
## EXECUTIVE SUMMARY
IP address 35.231.134.207 is a low-risk Google Cloud infrastructure endpoint with no active malicious indicators. The IP belongs to Google LLC (ASN 396982) within the GOOGLE-CLOUD network block 35.208.0.0/12. No immediate defensive actions are required based on current threat intelligence.
## INFRASTRUCTURE PROFILE
- Organization: Google LLC
- AS Number: 396982 (GOOGLE-CLOUD)
- Network Block: 35.208.0.0/12
- Geolocation: United States, South Carolina, Moncks Corner (33.21°N, 80.17°W)
- Classification: Cloud Computing Infrastructure
- Infrastructure Type: CloudCompute
- Risk Score: 0 (Low Risk)
## THREAT ASSESSMENT
- Abuse Confidence: Not applicable (no threat indicators detected)
- Blacklist Status: Clean (0 blacklist entries)
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- Vulnerability/Exploit Activity: None observed
- Campaign Association: None detected
## NETWORK SERVICES
- Open Ports: None detected (firewalled/no services exposed)
- HTTP Services: None observed
- TLS Certificates: None detected
- Service Purpose: Firewalled / No Services Exposed
## DNS RESOLUTION
- PTR Record: 207.134.231.35.bc.googleusercontent.com
- Forward Resolution: Confirmed (1 hostname)
- Email Authentication: SPF and DMARC records present
- Domain: googleusercontent.com
## OBSERVATION HISTORY (22 Observations)
- Recent Observations (2026-08-05): Cloud infrastructure confirmed; operator score 0.3478 ("Basic"); control plane routing stable
- Previous Observations (2026-07-29): Subnet abuse density 0.5; classification "mostly_clean"
- Threat Persistence: 0 days (no persistent malicious activity)
- Ownership Stability: No ownership changes recorded
## SUBNET ANALYSIS (35.231.134.0/24)
- Total Siblings: 2 IPs in /24 subnet
- Active Siblings: 2
- Threat Siblings: 1
- Abuse Density: 0.5 (low)
- Classification: Mostly Clean
- Inherited Risk: 2 (minimal)
- Neighbor IP: 35.231.134.63 (Risk Score: 25, Authority Score: 90)
- Note: Neighbor shows elevated risk but does not directly correlate with this IP
## RELATIONSHIP GRAPH
- Network Associations: Multiple GOOGLE-CLOUD network references
- DNS Associations: 207.134.231.35.bc.googleusercontent.com
- Malicious Entity Links: None detected
## SECURITY RECOMMENDATIONS
Based on current threat profile, no immediate blocking or mitigation actions are required. This IP represents legitimate Google Cloud infrastructure with proper security controls in place.
Recommended Actions:
- Monitor for any service exposure or port openings on this IP
- Continue standard logging and monitoring
- No firewall rules required at this time
## CONCLUSION
This IP address represents standard Google Cloud infrastructure with a clean security posture. The low risk score, absence of threat indicators, and proper DNS/email authentication records indicate legitimate cloud service operation. No defensive security actions are currently warranted.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGLE-CLOUD |
| CIDR Block | 35.208.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 207.134.231.35.bc.googleusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 207.134.231.35.bc.googleusercontent.com |
π DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | 1/4 domains |
| DMARC | 1/4 domains |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
| Domains Checked | 4 domains |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | β |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | kuberneteskubernetes.defaultkubernetes.default.svckubernetes.default.svc.cluster.local |
| Valid From | 2026-07-30T23:07:18+00:00 |
| Valid Until | 2027-07-30T23:09:18+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 365 days |
| Serial Number | 00E758767302BF63D5A5D763212C3D49F7 |
| Thumbprint | 081932DA50D1842350F082893D0925CE526B9482 |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 32% | 2 | 3 |
| ownership | 27% | 2 | 3 |
| reputation | 15% | 1 | 2 |
| geolocation | 37% | 2 | 3 |
| Overall | 25% | 10 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-07-22 13:24:26 UTC |
| Last Seen | 2026-08-12 16:59:41 UTC |
| Profile Built | 2026-08-12 17:09:16 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 28 |
Full dossier details are available via our API.