# IP Intelligence Briefing: 35.202.225.26/32
Classification: Google Cloud Infrastructure
Risk Assessment: Moderate Risk (Score: 50/100)
Report Date: Current
## Executive Summary
IP address 35.202.225.26 belongs to Google LLC (ASN: 396982) within the GOOGLE-CLOUD network block (35.192.0.0/12). The address demonstrates a moderate risk profile with no active threat indicators detected. Historical analysis indicates consistent benign behavior across 19 observations.
## Ownership and Infrastructure
| Attribute | Value |
|---|---|
| Organization | Google LLC |
| ASN | 396982 |
| Network | 35.192.0.0/12 |
| RIR | ARIN |
| CIDR Block | 35.202.224.0/20 |
| Region | US, Iowa |
Reverse DNS resolves to 26.225.202.35.bc.googleusercontent.com under the googleusercontent.com domain.
## Threat Assessment
Current Status: No active threats detected
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Blacklist Count: 0
- Threat Feeds: Empty
The IP demonstrates a stable ownership record with zero ownership changes. Control plane analysis indicates DNSBL listings on 2 of 8 evaluated lists.
## Neighborhood Analysis
Subnet 35.202.225.26/24 exhibits a clean classification with zero abuse density:
- Total Siblings: 1
- Active Siblings: 0
- Threat Siblings: 0
- Inherited Risk: 0
## Historical Observations
Analysis of 19 historical observations reveals:
- Consistent geolocation data pointing to US (Iowa region)
- Stable network routing characteristics
- No escalation in risk indicators over time
- No persistent malicious activity detected
## Service Exposure
Network scanning returned no open ports. The address is classified as "Firewalled / No Services" with no HTTP banners, TLS certificates, or server responses detected.
## Recommended Actions
Given the moderate risk score (50) and lack of active threat indicators, standard monitoring is advised. The following defensive measures are recommended for environments requiring stricter controls:
Firewall Blocking (if required):
- iptables: `iptables -A INPUT -s 35.202.225.26 -j DROP`
- nftables: `nft add rule inet filter input ip saddr 35.202.225.26 drop`
- NGINX: `deny 35.202.225.26;`
- pfSense: `35.202.225.26/32`
- Cloudflare WAF: Block IP with expression `ip.src eq 35.202.225.26`
- AWS WAF: Add 35.202.225.26/32 to IP set
Analyst Notes: This IP is associated with Google Cloud infrastructure. The moderate risk score likely reflects conservative risk scoring rather than active malicious activity. No immediate blocking action required unless specific organizational policies mandate it. Correlation with other signals should be performed before implementing blocking rules.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGLE-CLOUD |
| CIDR Block | 35.192.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 26.225.202.35.bc.googleusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 26.225.202.35.bc.googleusercontent.com |
π DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
βοΈ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 24% | 2 | 2 |
| routing | 17% | 1 | 1 |
| services | 17% | 1 | 1 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 17% | 1 | 1 |
| Overall | 21% | 8 | 10 |
| Data Coherence | Mostly Consistent (85%) β 1 contradiction(s) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-06-15 18:00:01 UTC |
| Last Seen | 2026-06-21 23:39:58 UTC |
| Profile Built | 2026-06-21 23:45:44 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 22 |
Full dossier details are available via our API.