35.220.210.187📋 Copy

# IP Intelligence Briefing: 35.220.210.187/32

Classification: Moderate Risk Infrastructure Host

Date: Current Assessment

Analyst: IPDebrief Intelligence

---

## Executive Summary

IP address 35.220.210.187 is a Google Cloud infrastructure host operating within the 35.208.0.0/12 CIDR block. Risk assessment yields a score of 50 (Moderate Risk). The IP exhibits standard cloud infrastructure characteristics with SSH service exposure and minimal threat indicators. No active attack campaigns or persistent malicious behavior detected.

---

## Ownership and Network Classification

The IP is classified as a Single-Service Host within Google Cloud infrastructure. Control plane analysis indicates route instability (isRouteStable: false) with an operator score of 0.3478.

---

## Threat Indicators

No active threat indicators or known campaign associations identified. The IP appears to be a legitimate cloud infrastructure endpoint.

---

## Network Services and Exposure

• Open Ports: TCP/22 (SSH)
• SSH Version: OpenSSH_8.9p1 Ubuntu-3ubuntu0.16
• DNS Resolution: 187.210.220.35.bc.googleusercontent.com
• PTR Record: 187.210.220.35.bc.googleusercontent.com
• TLS Certificate: None detected
• HTTP Service: None detected

The IP exposes SSH connectivity, consistent with standard cloud infrastructure hosting configurations. No web services or reverse proxy configurations observed.

---

## Subnet Neighborhood Assessment

Subnet: 35.220.210.187/24

Abuse Density: 0%

Classification: Clean

Active Threat Siblings: 0

Total Siblings: 1

The /24 subnet shows no malicious activity patterns or neighboring threat indicators.

---

## Historical Signal Analysis

18 observations recorded with the following patterns:

• Ownership and geolocation signals observed
• Recent activity from 2026-08-06
• No persistent malicious behavior detected
• Subnet consistently classified as "clean"
• Threat observation count: 0

Historical data indicates stable infrastructure behavior without degradation or escalation of threat signals.

---

## Relationship Graph

• DNS Associations: 187.210.220.35.bc.googleusercontent.com (4 entries)
• Network Associations: GOOGLE-CLOUD (2 entries)
• Total Relationships: 7

All relationships indicate legitimate Google Cloud infrastructure associations with no external or suspicious entity links.

---

## Recommended Actions

Based on risk profile and observed characteristics:

1. Monitor SSH Connections: Track inbound SSH traffic to this IP for potential lateral movement or credential-based attacks

2. DNSBL Monitoring: Investigate the 2 DNSBL listings to determine if false positives or legitimate abuse indicators

3. Route Stability Alert: Monitor for potential BGP hijacking or route announcements given isRouteStable: false

4. Allow Traffic (Standard): No firewall blocking recommended; treat as legitimate Google Cloud infrastructure

Priority: LOW – Infrastructure host with moderate risk score but no active threat indicators

---

Assessment: This IP represents standard Google Cloud infrastructure with expected SSH exposure and minimal threat profile. No immediate blocking action recommended. Monitor for changes in threat indicators or route stability.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.