IP Intelligence Briefing: 35.243.115.128
Date: 2026-06-16
---
**1. Core Profile**
- Risk Score: Low Risk (0/100)
- Provider: Google Cloud (ASN 396982)
- Geolocation: New York, NY, US (consensus geo-plausible)
- Network Role: Firewalled / No Services (cloud infrastructure)
- Ownership: No registered ASN/org name, missing ownership details (potential data gap).
- Threat Indicators: No malicious activity, spam, or known attacker associations.
---
**2. Observation History (Last 30 Days)**
- 14 signals recorded:
- DNS/Network: Linked to `googleusercontent.com` (SPF/DNSSEC validated).
- Prefix: Part of `35.243.112.0/20` (Google Cloud allocation).
- Behavioral: No honeypot hits, enumeration attempts, or WAF violations.
- Trend: Stable, no escalating risk or persistent malicious patterns.
---
**3. Relationships**
- No linked entities (hostnames, organizations, or certificates).
- No correlated IPs in threat feeds or campaigns.
---
**4. Neighborhood Analysis**
- Subnet: `35.243.115.128/24` (no abuse density reported).
- Neighbors: No sibling IPs or active threats in the subnet.
---
**5. Actionable Insights**
- SOC Recommendation:
- Allow traffic unless additional context suggests otherwise (e.g., internal testing).
- Monitor ownership details for missing ASN/org data.
- Verify DNSSEC and SPF records for `googleusercontent.com` to ensure no spoofing.
- Risk Mitigation: No immediate mitigation required; low-risk infrastructure.
Conclusion: Legitimate Google Cloud IP with no malicious activity. No further investigation needed unless ownership data gaps raise concerns.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGLE-CLOUD |
| CIDR Block | 35.208.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | 128.115.243.35.bc.googleusercontent.com |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | 128.115.243.35.bc.googleusercontent.com |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 24% | 2 | 2 |
| routing | 17% | 1 | 1 |
| services | 17% | 1 | 1 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 17% | 1 | 1 |
| Overall | 21% | 8 | 10 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-06-12 21:35:35 UTC |
| Last Seen | 2026-06-21 20:11:47 UTC |
| Profile Built | 2026-06-21 20:23:37 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 22 |
Full dossier details are available via our API.