35.204.188.255📋 Copy

# IP Intelligence Briefing: 35.204.188.255/32

## Executive Summary

Target IP 35.204.188.255 is a Google Cloud infrastructure endpoint located in Eemshaven, Netherlands. The IP demonstrates low-risk characteristics with a risk score of 25/100. No active threat indicators were observed across all intelligence sources. The IP serves as a cloud compute resource running Kubernetes services.

## Ownership & Infrastructure

• Organization: Google LLC (ASN: 396982)
• Network: 35.192.0.0/12 (GOOGLE-CLOUD)
• Infrastructure Type: CloudCompute, Cloud Provider
• Geolocation: Eemshaven, Netherlands (NL)
• Registration: ARIN registry

## Network Classification

• Primary Role: Web Server / Hosting
• Is Cloud Infrastructure: Yes
• Connection Type: Standard internet access
• Port 443 (HTTPS): Open and operational
• DNS Resolution: 255.188.204.35.bc.googleusercontent.com

## Threat Intelligence Assessment

• Risk Score: 25 (Low Risk)
• Abuse Confidence: Not elevated
• Blacklist Status: 1 DNSBL listing out of 8 total lists scanned
• Known Campaigns: None identified
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

## TLS/SSL Analysis

• Certificate Type: Self-signed certificate
• Certificate Subject: CN=35.204.188.255
• SANS (Subject Alternative Names):

- kubernetes

- kubernetes.default

- kubernetes.default.svc

- kubernetes.default.svc.cluster.local

• Certificate Status: Valid infrastructure certificate for Kubernetes cluster

## Observation History (27 total signals)

Recent observations indicate the IP resolves to various Kubernetes service endpoints:

• cluster.local
• default.svc
• kubernetes.default
• googleusercontent.com (with SPF/DMARC configured)

A subnet-level observation from 2026-06-21 classified the 35.204.188.0/24 subnet as "mostly_clean" with an abuse density score of 1.

## Network Neighborhood Analysis

• Subnet: 35.204.188.0/24
• Abuse Density: 1 (low)
• Subnet Classification: mostly_clean
• Threat Siblings: 1 identified within subnet
• Active Siblings: 1
• Risk Distribution: No high or medium risk neighbors detected

## Relationship Graph

38 relationships identified, primarily:

• Same Network associations (GOOGLE-CLOUD)
• DNS associations to bc.googleusercontent.com hostnames

## Security Recommendations

Based on the low-risk profile and legitimate cloud infrastructure classification:

• No blocking recommended – IP is authorized Google Cloud infrastructure
• Monitor for anomalies in traffic patterns rather than IP reputation
• DNSBL listing: Investigate the single DNSBL listing to determine source and relevance
• Traffic analysis: Focus on payload inspection rather than IP-based filtering

## SOC Analyst Notes

This IP represents standard Google Cloud Kubernetes infrastructure. The certificate subject alternative names confirm deployment in a Kubernetes service mesh environment. The low-risk score and cloud provider classification indicate this is legitimate infrastructure rather than malicious hosting. No immediate threat action required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.