35.237.199.23

{ } JSON 🔧 Full Actions API

🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

IP INTELLIGENCE BRIEFING: 35.237.199.23/32

Classification: LOW RISK | Infrastructure: Google Cloud Platform (GCP)

---

OWNER & ASSET IDENTIFICATION

Organization: Google LLC
ASN: 396982 (GOOGLE-CLOUD-PLATFORM)
CIDR Block: 35.208.0.0/12
Classification: Cloud Compute Infrastructure (Firewalled)
Network Role: Hosting Provider

GEOLOCATION

Primary Location: Moncks Corner, South Carolina, US (33.21°N, 80.17°W)
Geolocation Consensus: Mixed signals observed (North Charleston SC also reported in historical data)
Geographic Validation: GeoPlausible flag not set; multiple geolocation sources with varying confidence levels (0.56-0.85)

THREAT ASSESSMENT

Risk Score: 25/100 (Low Risk)
Threat Indicators: None detected
Blacklist Status: Not listed on any major threat feeds
Abuse Confidence: Not applicable (null)
Campaign Affiliation: None identified
Tor/Proxy Status: Not a Tor exit node, proxy, or known attacker IP

NETWORK CLASSIFICATION

Infrastructure Type: CloudCompute (Google Cloud)
Service Purpose: Firewalled / No Services exposed
Open Ports: None detected
DNS Configuration: Valid DNSSEC, Has CAA records, DNSSEC valid
Route Stability: False (route changes observed)

RELATIONSHIP ANALYSIS

DNS Associations: 23.199.237.35.bc.googleusercontent.com
Related Entities: 47 total relationships (DNS hostname, network associations)
Same Network: GOOGLE-CLOUD (35.237.0.0/16)
Campaign Correlation: None

NEIGHBORHOOD CONTEXT (35.237.199.0/24)

Abuse Density: 1 (low)
Subnet Classification: Mostly clean
Threat Siblings: 1 detected in subnet
Inherited Risk: 2/100

HISTORY & TEMPORAL ANALYSIS

Observation Count: 22 signals recorded
Threat Persistence: 0 days
Ownership Changes: 0 (stable)
Recent Activity: ASN and geolocation signals observed consistently in June 2026
Threat Persistence Days: 0

RECOMMENDED ACTIONS

SOC: Monitor for anomalous outbound traffic from this GCP infrastructure
Firewall: No blocking recommended; standard GCP traffic allowed
Investigation: No immediate action required; IP operates within expected cloud infrastructure parameters

SUMMARY

This IP address represents Google Cloud Platform infrastructure hosting in South Carolina. The IP shows low-risk characteristics with no active threat indicators or blacklist entries. The subnet exhibits minimal abuse density. Routine monitoring is appropriate; no defensive blocking actions recommended.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

Country	🇺🇸 United States
Region	SC
City	Moncks Corner
Timezone	America/New_York
Latitude	33.21
Longitude	-80.17

🏢 Ownership & Registration

Organization	Google LLC
ASN	AS396982
Network Name	GOOGLE-CLOUD
CIDR Block	35.208.0.0/12
RIR	ARIN
Country	United States
Abuse Contact	Available via RDAP

🌐 DNS Intelligence

PTR	23.199.237.35.bc.googleusercontent.com
Forward Confirmed	Yes — FCrDNS verified
Forward Hostnames	`23.199.237.35.bc.googleusercontent.com`

🔐 DNS Hygiene

Hygiene Score	100% (Excellent)
SPF	Present
DMARC	Present
FCrDNS	Verified
DNSSEC	Valid
CAA	Present

☁️ Network Classification

Infrastructure	Infrastructure / Datacenter
Service Purpose	Firewalled / No Services
Network Tier	Hosting — Infrastructure provider without advanced routing

CloudHosting

🔌 Services & Open Ports

Port	Service	Protocol	Banner
No open ports detected
Closed Ports	22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned)

Server	—
HTTP Title	—

🔐 TLS Certificate

🔒

No certificate

Issued by —

N/A

SANs	None
Valid From	—
Valid Until	—

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

Dimension	Score	Sources	Observations
threat	27%	2	4
routing	13%	1	1
services	15%	2	2
ownership	27%	2	3
reputation	26%	1	3
geolocation	25%	2	2
Overall	22%	10	15

Coverage: 6/6 dimensions · Data sufficiency: sufficient

Data Coherence	Consistent (100%)
Attribution	Moderate (70%)
	OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

📅 Observation Timeline 🔄 Live

First Seen	2026-05-27 07:17:39 UTC
Last Seen	2026-06-29 04:06:50 UTC
Profile Built	2026-06-29 10:09:29 UTC
Data Freshness	Live
Signal Types	23
Total Observations	24

🔍 23 signal types · 24 observations collected

This report is generated from 23+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.

{ } JSON API 🔧 Actions API 📧 Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.

35.237.199.23📋 Copy