# IP Intelligence Briefing: 35.247.199.93/32
## Executive Summary
Target IP 35.247.199.93 is identified as Google Cloud infrastructure with a low-risk classification (score: 25). No threat indicators, active campaigns, or malicious activity detected. The IP resolves to legitimate Google-owned services and exhibits stable ownership patterns.
## Ownership & Network Classification
| Field | Value |
|---|---|
| **Organization** | Google LLC |
| **ASN** | 396982 |
| **CIDR Block** | 35.208.0.0/12 |
| **Network Type** | Google Cloud Provider |
| **Classification** | Legitimate Cloud Infrastructure |
## Geolocation Data
| Field | Value |
|---|---|
| **Country** | Brazil (BR) |
| **Region** | São Paulo (SP) |
| **Coordinates** | -23.55°S, -46.63°W |
| **Timezone** | America/Sao_Paulo |
| **GeoSource Consensus** | Verified (2 sources) |
## DNS Resolution
- PTR Hostname: 93.199.247.35.bc.googleusercontent.com
- Forward Resolution: 93.199.247.35.bc.googleusercontent.com
- Reverse Confirmed: Yes
- Domain: googleusercontent.com
## Threat Assessment
| Indicator | Status |
|---|---|
| **Risk Score** | 25 (Low Risk) |
| **Abuse Confidence** | None |
| **Known Attacker** | No |
| **Spam Source** | No |
| **Tor Exit Node** | No |
| **Blacklist Count** | 0 |
| **Known Campaigns** | None |
| **DNSBL Listed** | 1 (8 total lists) |
## Network Behavior
- Open Ports: None detected
- TLS Certificate: None
- HTTP Banner: None
- Service Classification: Firewalled / No Services
## Observation History Analysis
Total observations: 18 signals
Temporal Stability:
- Ownership changes: 0
- Threat persistence days: 0
- Threat observation count: 0
- Persistently malicious: No
Recent Signal Types:
1. Subnet classification (clean, 0% abuse density)
2. Ownership stability (stable, 0 changes)
3. RIR registration (ARIN)
4. Geolocation (São Paulo, Brazil)
## Relationship Graph
Total relationships: 6
- DNS Associations: 93.199.247.35.bc.googleusercontent.com (4 occurrences)
- Network Associations: GOOGLE-CLOUD (2 occurrences)
- No malicious entity correlations
## Neighborhood Analysis (Subnet: 35.247.199.93/24)
| Metric | Value |
|---|---|
| **Abuse Density** | 0% |
| **Classification** | Clean |
| **Total Siblings** | 1 |
| **Active Siblings** | 0 |
| **Threat Siblings** | 0 |
## Risk Distribution (Subnet)
- High Risk: 0
- Medium Risk: 0
- Low Risk: 0
## Security Recommendations
Current Risk Level: Low
Based on the comprehensive threat profile, no immediate blocking actions are required. The IP demonstrates characteristics consistent with legitimate Google Cloud infrastructure:
1. No Action Required: Risk score of 25 indicates minimal threat concern
2. Monitoring: Continue standard traffic observation for cloud provider IPs
3. Firewall Rules: No specific recommendations generated
## Intelligence Conclusion
IP 35.247.199.93 is classified as low-risk cloud infrastructure belonging to Google LLC. The IP exhibits no malicious indicators, maintains stable ownership, and operates within a clean neighborhood with zero abuse density. No blocking or filtering is recommended unless additional contextual threat intelligence emerges.
Classification: LEGITIMATE CLOUD INFRASTRUCTURE
Last Updated: 2026-06-16
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGLE-CLOUD |
| CIDR Block | 35.208.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | 93.199.247.35.bc.googleusercontent.com |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | 93.199.247.35.bc.googleusercontent.com |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 40% | 2 | 3 |
| routing | 17% | 1 | 1 |
| services | 17% | 1 | 1 |
| ownership | 35% | 2 | 3 |
| reputation | 32% | 1 | 3 |
| geolocation | 17% | 1 | 1 |
| Overall | 26% | 8 | 12 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-06-10 02:37:37 UTC |
| Last Seen | 2026-06-21 17:07:25 UTC |
| Profile Built | 2026-06-21 17:24:52 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 24 |
Full dossier details are available via our API.