# IP Intelligence Briefing: 35.195.225.187/32
## Executive Summary
Analysis of IP 35.195.225.187 indicates a low-risk (Risk Score: 25) Google Cloud infrastructure asset with no active threat indicators. The IP operates as a single-service host within the GOOGLE-CLOUD network block (35.192.0.0/12) with clean neighborhood classification (abuse density: 0).
## Ownership & Infrastructure Profile
- Organization: Google LLC (ASN 396982)
- Network Name: GOOGLE-CLOUD
- CIDR Block: 35.192.0.0/12
- Geolocation: Belgium (BE), St. Ghislain, Region: WAL
- Infrastructure Type: Cloud-hosted single-service host
- Classification Flags: Not CDN, VPN, proxy, Tor, hosting, mobile, or residential
## Threat Indicators Assessment
- Risk Score: 25/100 (Low Risk)
- Blacklist Status: 0 entries
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Known Campaigns: None
- Abuse Confidence Score: Not applicable
## Active Services
- Open Ports: TCP/22 (SSH)
- SSH Banner: SSH-2.0-OpenSSH_10.0
- TLS Certificate: Not detected
- HTTP Title: Not detected
## DNS Resolution
- PTR Hostname: 187.225.195.35.bc.googleusercontent.com
- Forward Resolution: Confirmed
- Forward Hostname: 187.225.195.35.bc.googleusercontent.com
- Domain: googleusercontent.com
- Email Auth: SPF and DMARC records present
## Network & Control Plane
- Origin ASN: 396982 (GOOGLE)
- BGP Prefix: 35.195.224.0/20
- RPKI State: Not validated
- DNSBL Listings: 1 of 8 lists
- Operator Score: 0.3478 (Basic)
- Route Stability: Flagged as not stable
## Neighborhood Analysis
- Subnet: 35.195.225.187/24
- Abuse Density: 0%
- Classification: Clean
- Total Siblings: 1
- Threat Siblings: 0
## Observation History
Analysis of 20 signal observations reveals consistent Google Cloud infrastructure behavior with no evidence of persistent malicious activity. Recent observations (as of 2026-07-30) confirm:
- SSH service operational
- Geographic location consistent with claimed data
- No campaign correlations detected
- Zero threat observation count
## Relationships
- DNS Associations: 187.225.195.35.bc.googleusercontent.com (multiple entries)
- Network Associations: GOOGLE-CLOUD network (multiple entries)
- Related Entities: No additional organizations or certificates identified
## Risk Assessment
This IP represents a benign Google Cloud infrastructure component with standard operational characteristics. The single open SSH port is typical for cloud host management interfaces. No malicious activity, abuse patterns, or threat correlations detected.
## Recommended Actions
No immediate security actions required. Standard monitoring practices apply. The IP does not warrant blocking or special treatment based on current intelligence.
---
Briefing Date: Current
Analyst: IPDebrief Intelligence Team
Classification: Defensive Security Analysis
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGLE-CLOUD |
| CIDR Block | 35.192.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | 187.225.195.35.bc.googleusercontent.com |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | 187.225.195.35.bc.googleusercontent.com |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 21% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 23% | 10 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-07-27 09:39:30 UTC |
| Last Seen | 2026-08-12 21:29:04 UTC |
| Profile Built | 2026-08-12 21:33:27 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 23 |
Full dossier details are available via our API.