# IP Intelligence Briefing: 35.241.165.61/32
Classification: Low Risk Infrastructure IP
Date Generated: Based on latest signal collection 2026-08-05
---
## Executive Summary
IP 35.241.165.61 is a Google Cloud infrastructure endpoint with a low-risk profile (Risk Score: 25). The address belongs to Google LLC (ASN 396982) within the 35.208.0.0/12 block. No active threat indicators detected; no open services, no known malware campaigns, and zero blacklist listings.
---
## Technical Profile
Ownership: Google LLC / GOOGLE-CLOUD
ASN: 396982
Geolocation: Belgium (St. Ghislain, 50.45°N, 3.82°E)
Network Role: Cloud infrastructure provider (Firewalled / No Services)
DNS Resolution: 61.165.241.35.bc.googleusercontent.com
PTR Record: 61.165.241.35.bc.googleusercontent.com
Forward Resolution: Confirmed
---
## Threat Assessment
Risk Score: 25 (Low Risk)
Abuse Confidence: Not applicable (infrastructure IP)
Known Attacker: No
Spam Source: No
Tor Exit: No
Control Plane Observations:
- RPKI State: Valid
- DNSBL Listed: 1 of 8 total lists (minor listing)
- Route Changes (30d): 2 (moderate stability)
- BGP Path: 7018 โ 15169 โ 396982
---
## Neighborhood Analysis
Subnet: 35.241.165.61/24
Abuse Density: 0 (minimal)
Classification: Mostly Clean
Total Siblings: 2
Active Siblings: 1
Threat Siblings: 2
The subnet exhibits low abuse density with minimal correlated threat activity. One neighbor (35.241.165.134) shows similar risk profile (Risk Score: 25, Authority Score: 90).
---
## Historical Observations
Total Signals: 28
Threat Persistence: 0 days
Campaign Likelihood: None
Cert Matches: 0
Correlated IPs: 0
Observation history shows stable infrastructure behavior with no persistent malicious activity. Most recent signals (2026-08-05) indicate moderate routing/operator scores consistent with Google Cloud infrastructure characteristics.
---
## Recommended Actions
Firewall Treatment: Permissive (infrastructure IP)
Monitoring: Standard traffic analysis only
Threat Response: No immediate action required
This IP represents legitimate Google Cloud infrastructure with no evidence of compromise or abuse. Standard monitoring practices apply. No firewall blocking or traffic restrictions recommended.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGLE-CLOUD |
| CIDR Block | 35.208.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | 61.165.241.35.bc.googleusercontent.com |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | 61.165.241.35.bc.googleusercontent.com |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 2 โ Moderate operator sophistication with routing hygiene |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 40% | 2 | 5 |
| routing | 30% | 3 | 4 |
| services | 19% | 2 | 2 |
| ownership | 30% | 3 | 4 |
| reputation | 26% | 1 | 3 |
| geolocation | 25% | 1 | 1 |
| Overall | 28% | 12 | 19 |
| Data Coherence | Consistent (100%) |
| Attribution | High (85%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-07-25 08:45:28 UTC |
| Last Seen | 2026-08-12 19:36:17 UTC |
| Profile Built | 2026-08-12 19:47:48 UTC |
| Data Freshness | Live |
| Signal Types | 27 |
| Total Observations | 28 |
Full dossier details are available via our API.