35.225.58.19📋 Copy

# IP Intelligence Briefing: 35.225.58.19/32

## Executive Summary

IP 35.225.58.19 is a Google Cloud infrastructure address with a moderate risk profile (score: 50). The IP belongs to Google LLC's cloud network (ASN 396982) in Council Bluffs, Iowa, US. While the IP shows clean operational characteristics with no active threat indicators, two DNSBL listings warrant continued monitoring.

## Ownership & Infrastructure

## Threat Assessment

• Risk Score: 50 (Moderate Risk)
• Abuse Confidence Score: Not applicable
• Blacklist Count: 0 (active), 2 DNSBL lists
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Campaign Associations: None detected

## Network Classification

Service Status: No open ports detected. Services field shows "Firewalled / No Services."

## Geolocation Data

## DNS & Email Authentication

• PTR Hostname: 19.58.225.35.bc.googleusercontent.com
• Forward Resolution: Confirmed (1 host)
• Domain: googleusercontent.com
• Email Authentication: SPF present, DMARC present
• TXT Record Count: 0

## Neighborhood Analysis (35.225.58.0/24)

• Subnet Classification: Clean
• Abuse Density: 0
• Threat Siblings: 0
• Active Siblings: 0
• Total Siblings: 1
• Inherited Risk: 0

## Observation History (17 observations)

Analysis of signal history indicates:

• Ownership has remained stable with 0 ownership changes
• No persistent malicious activity detected
• Geographic signals consistently point to US (ARIN registry)
• Recent observations (2026-08-06) show consistent Google LLC attribution
• Risk persistence: 0 days
• Threat observation count: 0

## Relationships

Five relationships identified:

1. DNS Association: 19.58.225.35.bc.googleusercontent.com (hostname)

2. Same Network: GOOGLE-CLOUD (network)

3. DNS Association: 19.58.225.35.bc.googleusercontent.com (hostname)

4. Same Network: GOOGLE-CLOUD (network)

5. DNS Association: 19.58.225.35.bc.googleusercontent.com (hostname)

## Security Recommendations

Firewall Rules

iptables:

```bash

iptables -A INPUT -s 35.225.58.19 -j DROP

```

nftables:

```bash

nft add rule inet filter input ip saddr 35.225.58.19 drop

```

nginx:

```nginx

deny 35.225.58.19;

```

pfSense:

```

35.225.58.19/32

```

Cloudflare WAF:

```json

{

"description": "Block 35.225.58.19 — IPDebrief risk score 50",

"action": "block",

"filter": {

"expression": "ip.src eq 35.225.58.19"

}

}

```

AWS WAF:

```json

{

"Addresses": ["35.225.58.19/32"],

"Description": "IPDebrief risk 50"

}

```

Analyst Notes

Despite the moderate risk score, this IP exhibits characteristics of legitimate Google Cloud infrastructure:

• No open ports or active services
• Clean neighborhood with no threat siblings
• Stable ownership attribution
• Valid DNS and email authentication records

The two DNSBL listings should be investigated as potential false positives. Consider implementing a whitelist for Google Cloud IP ranges rather than blocking this specific address, unless specific malicious activity is observed. Monitor for changes in service availability or DNS resolution patterns.

---

*Generated by IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.