35.188.115.252📋 Copy

# IP Intelligence Briefing: 35.188.115.252/32

Classification: Moderate Risk

Date: Current Analysis

Analyst: IPDebrief Intelligence Team

---

## Executive Summary

IP address 35.188.115.252 is a Google Cloud infrastructure endpoint with a moderate risk profile (Score: 50). The IP resolves to a Googleusercontent hostname and operates within the GOOGLE-CLOUD network (ASN 396982, 35.184.0.0/13). No active threat indicators or malicious campaigns were detected. The IP exhibits no persistent malicious behavior and has zero threat observations in historical data.

---

## Technical Profile

Ownership & Network:

• Organization: Google LLC
• ASN: 396982
• Network: GOOGLE-CLOUD (35.184.0.0/13)
• Registration: ARIN
• Geolocation: Council Bluffs, Iowa, US

DNS Resolution:

• PTR Hostname: 252.115.188.35.bc.googleusercontent.com
• Forward Resolution: Confirmed
• Hosted Domain: googleusercontent.com
• Email Authentication: SPF and DMARC records present

Network Services:

• Open Ports: None detected
• TLS Certificate: None
• HTTP Banner: None
• Connection Status: Firewalled / No services exposed

Control Plane:

• Operator Score: 0.3478 (Basic)
• DNSBL Listed: 2 of 8 lists
• Route Stability: Unstable
• RPKI State: Not validated

---

## Risk Assessment

Overall Risk Score: 50/100 (Moderate Risk)

Risk Breakdown:

• Provider Score: 0 (Clean provider infrastructure)
• Authority Score: 0 (No authority indicators)
• Stability Score: 0 (Insufficient data)

Threat Indicators:

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0
• Campaign Likelihood: None

---

## Historical Observations

Observation Count: 22 signals

Temporal Analysis:

• No persistent malicious activity detected
• Threat persistence days: 0
• Ownership changes: 0
• Threat observation count: 0

Recent Signal Types:

• Port scanning activity (SSH detected)
• Operator classification assessments
• Network profiling
• Certificate and banner matching

---

## Neighborhood Analysis

Subnet: 35.188.115.252/24

• Abuse Density: 0
• Classification: Clean
• Threat Siblings: 0
• Active Siblings: 1

Risk Distribution:

• High Risk: 0
• Medium Risk: 0
• Low Risk: 0

---

## Related Entities

DNS Associations:

• 252.115.188.35.bc.googleusercontent.com (multiple records)

Network Associations:

• GOOGLE-CLOUD (multiple network relationships)

---

## Recommended Actions

Current Status: No active threat recommendations due to moderate risk classification and provider infrastructure nature.

Firewall Rules (if required):

```bash

iptables -A INPUT -s 35.188.115.252 -j DROP

nft add rule inet filter input ip saddr 35.188.115.252 drop

```

Platform-Specific:

• Cloudflare WAF: Block with description "IPDebrief risk score 50"
• AWS WAF: Block address 35.188.115.252/32

Note: These rules are probabilistic recommendations. Given this is Google Cloud infrastructure with no detected malicious activity, blocking may impact legitimate traffic unless specific indicators warrant it.

---

## Intelligence Assessment

This IP represents Google Cloud infrastructure with moderate risk classification. The primary indicators (DNSBL listings on 2 of 8 lists) are inconsistent with the otherwise clean profile and provider infrastructure. No active campaigns, threats, or malicious indicators were observed. The IP should be monitored but does not currently warrant blocking based on threat intelligence alone.

Recommendation: Monitor for escalation in risk profile or emergence of threat indicators. Current profile supports continued operation without blocking measures.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.