35.237.213.107📋 Copy

# IP Intelligence Briefing: 35.237.213.107

## Executive Summary

IP 35.237.213.107 is a low-risk Google Cloud Infrastructure address. The IP demonstrates stable cloud compute characteristics with no active threat indicators, no known malicious activity, and a clean neighborhood profile. SOC analysts may treat this as trusted cloud infrastructure with standard baseline monitoring.

## Ownership and Network Classification

• Organization: Google LLC
• ASN: AS396982 (GOOGLE-CLOUD-PLATFORM)
• CIDR Block: 35.208.0.0/12
• Infrastructure Type: Cloud Compute (Google Cloud)
• Geolocation: Moncks Corner, SC, US
• Service Status: Firewalled / No services exposed

## Risk Assessment

• Overall Risk Score: 25 (Low Risk)
• Abuse Confidence Score: Not applicable
• Blacklist Presence: 0 listings
• Known Attacker: False
• Spam Source: False
• Tor Exit Node: False
• Proxy Service: False

## Technical Profile

• DNS Resolution: 107.213.237.35.bc.googleusercontent.com (forward confirmed)
• PTR Record: 107.213.237.35.bc.googleusercontent.com
• Open Ports: None detected
• TLS/HTTP Services: Not active
• Certificate Status: None

## Historical Observations

Total of 23 observations collected. Recent signals (August 2026) confirm:

• Persistent Google Cloud ASN (396982)
• US-based geolocation with consistent routing
• DNSBL listing detected in one historical observation (1 list, high severity)
• No correlation with known threat campaigns

## Network Neighborhood

• Subnet: 35.237.213.0/24
• Abuse Density: 0%
• Classification: Clean
• Threat Siblings: 0
• Active Siblings: 1 (benign cloud instance)

## Relationship Graph

• 22 relationships identified
• All point to internal Google Cloud hostname and network
• No external threat actor relationships
• No certificate associations found

## Recommended Actions

• Monitor as Baseline: Treat as trusted cloud infrastructure
• Standard Logging: Enable standard traffic logging for forensic purposes
• No Blocking Required: No firewall rules recommended
• Whitelist Consideration: May be added to organizational allowlists if traffic patterns expected

## SOC Analyst Notes

This IP represents legitimate Google Cloud infrastructure with a low risk profile. The single historical DNSBL listing does not indicate current malicious activity. No active threat indicators present. Treat as trusted cloud provider IP with standard monitoring practices.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.