## IP Intelligence Briefing: 35.245.161.246/32
Target: 35.245.161.246
Date: Current
Classification: Cloud Infrastructure - Low Concern
Executive Summary
IP 35.245.161.246 is identified as Google Cloud infrastructure (GOOGLE-CLOUD, ASN 396982) located in Washington, DC. The address registered a moderate risk score of 50, but operational analysis reveals no active threat indicators, malicious campaigns, or evidence of abuse. The IP presents as legitimate cloud compute infrastructure with no open services exposed.
Network Profile
- Organization: Google LLC
- ASN: 396982
- Network Block: 35.208.0.0/12
- Geolocation: Washington, DC, US (38.91°N, -77.04°W)
- Infrastructure Type: CloudCompute
- Classification: Cloud provider infrastructure
Threat Indicators
No active threat indicators were observed:
- No known attacker reputation
- No Tor exit node activity
- No spam source classification
- Zero blacklist hits on threat feeds
- No known campaign associations
The moderate risk score (50) reflects cloud infrastructure classification rather than malicious activity.
Network Behavior
- Services: No open ports detected; firewall configured
- DNS: Resolves to 246.161.245.35.bc.googleusercontent.com (googleusercontent.com)
- Email Authentication: SPF and DMARC records present
- Control Plane: Route stable; RPKI validation pending
Neighborhood Analysis
Subnet 35.245.161.246/24 shows clean classification with:
- Abuse density: 0%
- Active siblings: 0
- Threat siblings: 0
No adjacent IPs exhibit malicious behavior.
Historical Observations
Twenty signal observations tracked over the monitoring period. Recent observations (August 2026) confirmed:
- Stable ownership (zero ownership changes)
- No persistent malicious activity
- No threat persistence detected
- Geolocation consistent across sources
Security Recommendations
- Block: No blocking recommended; legitimate cloud infrastructure
- Monitor: No specific monitoring required
- Allow: Standard egress/ingress rules apply for cloud traffic
Conclusion
IP 35.245.161.246 is legitimate Google Cloud infrastructure with no evidence of malicious activity. The moderate risk score reflects the cloud provider classification. No defensive action required.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGLE-CLOUD |
| CIDR Block | 35.208.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 246.161.245.35.bc.googleusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 246.161.245.35.bc.googleusercontent.com |
π DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 24% | 2 | 2 |
| routing | 17% | 1 | 1 |
| services | 24% | 2 | 2 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 35% | 2 | 3 |
| Overall | 25% | 10 | 13 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-08-04 17:59:47 UTC |
| Last Seen | 2026-08-13 06:52:43 UTC |
| Profile Built | 2026-08-13 07:08:24 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 24 |
Full dossier details are available via our API.