INTELLIGENCE BRIEFING: 35.187.162.255/32
---
**EXECUTIVE SUMMARY**
IP 35.187.162.255 is a Google Cloud infrastructure endpoint classified as Low Risk (Score: 25) with no active threat indicators. The IP operates within a mostly-clean subnet (35.187.162.0/24) showing 33% abuse density. Historical analysis reveals consistent benign behavior with no persistent malicious activity detected.
---
**OWNERSHIP & GEOLOCATION**
- Organization: Google LLC
- ASN: 396982 (GOOGLE-CLOUD)
- Network: 35.184.0.0/13
- Geolocation: Brussels, Belgium (BE)
- Infrastructure Type: Cloud Compute
- Registration: ARIN registry
The IP resolves to `255.162.187.35.bc.googleusercontent.com` via reverse DNS, confirming Google Cloud infrastructure hosting.
---
**THREAT ASSESSMENT**
| Indicator | Status |
|---|---|
| Risk Score | 25 (Low) |
| Known Attacker | No |
| Spam Source | No |
| Tor Exit Node | No |
| Blacklist Entries | 0 |
| Campaign Correlation | None |
Control Plane Analysis:
- BGP Prefix: 35.187.160.0/20
- Route Stability: Unstable
- DNSSEC: Valid
- RPKI State: Not assessed
- DNSBL Listed: 1 of 8 total lists
---
**NEIGHBORHOOD CONTEXT (35.187.162.0/24)**
- Abuse Density: 33.33%
- Classification: Mostly Clean
- Total Siblings: 3
- Active Siblings: 2
- Threat Siblings: 1
Sibling IPs:
- `35.187.162.70` โ Risk: 25, Authority: 90
- `35.187.162.84` โ Risk: 25, Authority: 90
The subnet demonstrates low-to-moderate risk distribution with Google Cloud infrastructure characteristics.
---
**NETWORK SERVICES**
- Open Ports: None detected
- HTTP/HTTPS: No services exposed
- TLS Certificates: None
- Banner Analysis: No server banners detected
The endpoint is firewalled with no publicly accessible services, indicating backend infrastructure usage.
---
**HISTORICAL OBSERVATIONS**
Total Signals: 22 observations over monitoring period
Key Temporal Findings:
- Last observed: 2026-08-13
- Classification consistency: Mostly clean
- Threat persistence: 0 days
- Persistent malicious activity: None detected
Observations indicate stable, non-malicious network behavior throughout the monitoring window.
---
**RELATIONSHIP MAPPING**
- DNS Associations: googleusercontent.com (confirmed)
- Network Affiliations: GOOGLE-CLOUD (multiple instances)
- Certificate Links: None detected
- Hostname Associations: 255.162.187.35.bc.googleusercontent.com
Relationship graph shows consistent infrastructure mapping within Google Cloud's distributed network.
---
**RECOMMENDED ACTIONS**
No security actions required. The IP demonstrates standard Google Cloud infrastructure behavior with no malicious indicators. If this IP appears in threat logs, it should be evaluated as:
1. False Positive: Likely legitimate Google Cloud compute instance
2. Monitor: Track for any changes in risk profile
3. No Block: Default allow policy applies
---
**INTELLIGENCE NOTES**
- Infrastructure matches known Google Cloud patterns
- No correlation to active threat campaigns
- Subnet abuse density warrants contextual monitoring but not immediate concern
- DNSSEC validation and SPF/DMARC records present indicate proper email security configuration
Classification: LOW RISK โ Standard Google Cloud Infrastructure
Last Updated: 2026-08-13
Confidence Level: High
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGLE-CLOUD |
| CIDR Block | 35.184.0.0/13 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | 255.162.187.35.bc.googleusercontent.com |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | 255.162.187.35.bc.googleusercontent.com |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 3 |
| routing | 17% | 1 | 1 |
| services | 24% | 2 | 2 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 35% | 2 | 3 |
| Overall | 27% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | High (85%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-08-05 18:28:30 UTC |
| Last Seen | 2026-08-13 08:14:52 UTC |
| Profile Built | 2026-08-13 08:36:52 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 30 |
Full dossier details are available via our API.