35.200.126.118📋 Copy

INTELLIGENCE BRIEFING: 35.200.126.118/32

Classification: LOW RISK — Cloud Infrastructure

Date: 2026-06-19

Analysis ID: IP-2026-06-19-118

---

EXECUTIVE SUMMARY

IP 35.200.126.118 is a Google Cloud infrastructure endpoint located in Tokyo, Japan. The asset demonstrates a low-risk profile (Risk Score: 25/100) with no active threat indicators. Analysis confirms this is legitimate cloud compute infrastructure associated with Google's cloud services network. No immediate defensive action required beyond standard cloud infrastructure monitoring.

---

OWNERSHIP AND ATTRIBUTION

The IP resolves to the Google Cloud provider network with ownership registration confirmed via RDAP abuse contact channels.

---

THREAT ASSESSMENT

Risk Score: 25 (Low Risk)

Threat Indicators:

• Blacklist Count: 0
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Active Campaigns: None detected
• Abuse Confidence Score: N/A

Network Classification Flags:

• Cloud Infrastructure: Yes
• Hosting: Yes
• CDN: No
• VPN/Proxy: No
• Residential: No
• Bogon: No

---

NETWORK BEHAVIOR AND SERVICES

Service Profile:

• Open Ports: None detected
• TLS Certificate: N/A
• HTTP Title: N/A
• Status: Firewalled / No Services Available

DNS Resolution:

• PTR Hostname: 118.126.200.35.bc.googleusercontent.com
• Forward Resolution: 118.126.200.35.bc.googleusercontent.com
• Associated Domain: googleusercontent.com
• DNSSEC Valid: Yes
• SPF: Present
• DMARC: Present

Control Plane Data:

• Route Stability: False
• RPKI State: Not assessed
• IRR Consistency: Not assessed
• DNSBL Listed: 1 of 8 total lists

---

OBSERVATION HISTORY (Last 23 Signals)

Temporal Analysis:

• First Observed: 2026-06-14
• Last Observed: 2026-06-19
• Threat Persistence Days: 0
• Is Persistently Malicious: No

Key Historical Observations:

• 2026-06-19 17:12:02: Operator Score 0.3478 (Basic operator label)
• 2026-06-14 17:13:20: Geolocation confirmed Tokyo, JP (multi-signal inference)
• 2026-06-14 17:11:44: Cloud infrastructure classification confirmed (Google Cloud)

The IP demonstrates stable ownership and consistent cloud infrastructure classification throughout the observation window. No escalation in threat indicators detected.

---

RELATIONSHIP GRAPH (52 Entities)

Connected Entities:

• DNS Associations: 48 entries to 118.126.200.35.bc.googleusercontent.com
• Network Associations: GOOGLE-CLOUD network

Analysis: All relationships indicate DNS associations to the same googleusercontent.com hostname. No external organization links or certificate associations detected. This pattern is consistent with Google Cloud's internal IP management practices.

---

SUBNET NEIGHBORHOOD ANALYSIS

Subnet: 35.200.126.118/24

The /24 subnet shows minimal abuse activity, confirming this is part of a clean cloud infrastructure block.

---

RECOMMENDED ACTIONS

Security Posture: No Immediate Action Required

Recommended Firewall Rules: None

Monitoring Guidance: Standard cloud infrastructure monitoring protocols apply. No blocking or rate-limiting recommendations based on current risk profile.

Action Items:

• Continue monitoring for any changes in geolocation or ownership
• Maintain standard cloud infrastructure baselines
• No defensive rules required at this time

---

INTELLIGENCE CONCLUSION

IP 35.200.126.118 is a legitimate Google Cloud infrastructure resource with low-risk characteristics. The IP demonstrates consistent cloud compute behavior, proper DNS configuration, and no association with known malicious activity. SOC analysts should treat this as benign cloud infrastructure and monitor for any anomalous behavior patterns that deviate from typical cloud service usage.

Confidence Level: High

Risk Rating: Low

Priority: Normal

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.