35.185.249.17📋 Copy

## IP Intelligence Briefing: 35.185.249.17/32

Classification: Low Risk Infrastructure

Assessment Date: 2026-06-16

Status: Clean / Legitimate Cloud Infrastructure

---

Executive Summary

IP address 35.185.249.17 is identified as Google Cloud infrastructure with a low-risk profile. No active threat indicators were detected during comprehensive analysis. The IP is associated with legitimate cloud services and shows no evidence of malicious activity or abuse.

---

Ownership and Infrastructure Profile

• Organization: Google LLC
• ASN: AS396982 (GOOGLE-CLOUD)
• CIDR Block: 35.184.0.0/13
• Geolocation: The Dalles, Oregon, US (America/Los_Angeles timezone)
• DNS Reverse: 17.249.185.35.bc.googleusercontent.com
• Hosted Domain: googleusercontent.com
• Email Authentication: SPF and DMARC records present

---

Risk Assessment

• Overall Risk Score: 25 (Low Risk)
• Abuse Confidence Score: Not elevated
• Threat Indicators: None detected
• Blacklist Status: 0 blacklists; 1 DNSBL listing out of 8 total (non-critical)
• Tor Exit / Known Attacker: Not flagged
• Spam Source: Not identified

---

Network Role and Services

• Infrastructure Type: Google Cloud Provider
• Services Detected: None (firewalled/no services exposed)
• Open Ports: 0
• TLS Certificate: None detected
• HTTP Services: None active

---

Neighborhood Analysis

• Subnet: 35.185.240.0/20
• Abuse Density: 0 (Clean)
• Threat Siblings: 0
• Active Siblings: 1
• Neighbor Risk Distribution: No high or medium risk neighbors identified

---

Control Plane Observations

• BGP Prefix: 35.185.240.0/20
• Route Stability: False
• RPKI State: Not validated
• DNSSEC: Valid
• CAA Records: Present
• Origin ASN: AS396982

---

Historical Behavior (Last 20 Observations)

Analysis of observation history from 2026-06-16 indicates consistent, benign behavior:

• Classification maintained as "clean"
• Abuse density remained at 0
• No persistent malicious activity detected
• All signal dimensions (threat, routing, services, ownership, reputation, geolocation) covered with confidence

---

Relationship Graph

The IP exhibits 19 relationships, primarily:

• Network Associations: Multiple "Same Network" relationships to GOOGLE-CLOUD infrastructure
• DNS Associations: Consistent resolution to 17.249.185.35.bc.googleusercontent.com
• No malicious entity correlations detected

---

Recommended Actions

SOC Analyst Guidance: No defensive actions required. This IP represents legitimate Google Cloud infrastructure.

If previously flagged:

• Review correlation logic for Google Cloud IPs
• Consider whitelisting if false positive occurred
• Verify no policy conflicts with cloud provider ranges

Firewall Recommendation: No blocking action required. Standard monitoring applies.

---

Campaign Correlation

• Campaign Likelihood: None
• Cert Matches: 0
• Banner Matches: 0
• Correlated IPs: 0

---

Confidence Level: High

Data Sources: 10+ observation sources with complete dimension coverage

Product: IPDebrief Intelligence Platform

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.