35.185.125.136📋 Copy

# IP Intelligence Briefing: 35.185.125.136

## Executive Summary

IP address 35.185.125.136 was analyzed and classified as a Google Cloud compute infrastructure asset with moderate risk (score: 40). The IP resolved to a Google user content endpoint and shows minimal threat indicators, though it maintains presence on two DNSBL lists.

## Infrastructure Profile

• Organization: Google LLC (ASN 396982)
• Network: GOOGLE-CLOUD (35.184.0.0/13)
• Classification: Cloud Compute, Hosting
• Geolocation: Moncks Corner, South Carolina, US (33.21, -80.17)
• Reverse DNS: 136.125.185.35.bc.googleusercontent.com
• Forward Resolution: 136.125.185.35.bc.googleusercontent.com (confirmed)

## Risk Assessment

• Overall Risk Score: 40 (Moderate)
• Provider Score: 0
• Authority Score: 0
• Stability: No ownership changes detected
• Abuse Density: 0 (low)

## Threat Indicators

• DNSBL Listings: 2 out of 8 total lists (high severity)
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Campaign Association: None identified
• Threat Persistence: 0 days

## Neighborhood Analysis

The /24 subnet (35.185.125.0/24) contains one neighbor:

• 35.185.125.135: Risk Score 25, Authority Score 90 (low risk, high authority)
• Subnet Abuse Density: 0
• Active Threat Siblings: 0

## Network Observations

• Open Ports: None detected
• TLS Certificate: Not observed
• HTTP Service: Not observed
• ICMP Validation: Blocked (unable to validate)
• BGP Prefix: 35.185.112.0/20
• Route Stability: Not stable

## Historical Signals

Sixteen observations recorded since 2026-08-13, including:

• DNS resolution and CAA record verification
• Geolocation inference from multi-signal analysis
• DNSBL listing activity (2 lists, high severity)
• ICMP probing attempts (blocked)

## Recommended Actions

Given the moderate risk score and cloud infrastructure classification:

1. Allow Traffic: The IP belongs to Google Cloud infrastructure with no active threat indicators. Permit standard traffic patterns.

2. Monitor DNSBL Status: Investigate the 2 DNSBL listings to understand listing reasons and severity.

3. Firewall Rules: No specific blocking rules required at this time. Standard cloud provider traffic patterns should be allowed.

4. Correlation: The single neighbor IP (35.185.125.135) shows low risk and can be monitored together as part of the same subnet.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.