35.195.226.12📋 Copy

# IP Intelligence Briefing: 35.195.226.12/32

Classification: Low Risk — Google Cloud Infrastructure

Date: 2026-06-27

Analyst: IPDebrief Intelligence Team

---

## Executive Summary

IP address 35.195.226.12 is a low-risk (score: 25/100) Google Cloud infrastructure endpoint hosted in Belgium. The IP exhibits standard cloud behavior with no active threat indicators, no open services, and is part of a predominantly clean /24 subnet. No immediate blocking or mitigation actions are required.

---

## Ownership and Infrastructure

Control Plane Data:

BGP prefix: 35.195.224.0/20 | Route stable: Yes | RPKI state: Valid | Delegation age: 2,865 days

---

## Network Role and Services

• Network Role: Cloud Infrastructure (Google Cloud Platform)
• Services: Firewalled / No Services Detected
• DNS: Reverse DNS: 12.226.195.35.bc.googleusercontent.com
• Forward Resolution: Confirmed (1 hostname)
• Domain: googleusercontent.com (SPF: Yes, DMARC: Yes)

---

## Threat Assessment

• Risk Score: 25 (Low Risk)
• Abuse Confidence: Not applicable
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0
• Threat Feeds: None detected
• Known Campaigns: None

---

## Neighborhood Analysis

Subnet: 35.195.226.12/24

Classification: Mostly Clean

Abuse Density: 0.6667

Total Siblings: 3 | Active Siblings: 3 | Threat Siblings: 2

---

## Historical Observations (Last 30 Days)

25 signal observations recorded. Key temporal findings:

• June 27, 2026: Operator score 0.2174 (Minimal), route stability maintained
• June 25, 2026: Subnet abuse density classification: "mostly_clean"
• Consistency: Risk profile remains stable with no escalation

---

## Relationship Graph

Primary relationships identified:

• DNS associations: 12.226.195.35.bc.googleusercontent.com (multiple records)
• Network associations: GOOGLE-CLOUD (Google Cloud infrastructure)

---

## Recommended Actions

Security Posture: Monitor

No specific firewall or blocking rules recommended. The IP represents legitimate cloud infrastructure with no active threat indicators. Standard egress rules for cloud traffic apply.

Monitoring Recommendations:

• Track outbound connections from internal systems to this IP
• Monitor for any changes in DNS resolution or port exposure
• Continue periodic re-assessment as part of routine intelligence refresh

---

## Conclusion

35.195.226.12 is a benign Google Cloud endpoint with low risk characteristics. No evidence of malicious activity, abuse, or compromise. The IP should be treated as legitimate cloud infrastructure requiring standard monitoring practices.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.