35.245.112.182📋 Copy

# IP Intelligence Briefing: 35.245.112.182

## Executive Summary

IP address 35.245.112.182 is a Google Cloud infrastructure host with moderate risk scoring (50). The address is associated with legitimate cloud compute infrastructure but shows evidence of DNS blacklist listings. No active threat indicators detected.

## Ownership and Classification

## Technical Profile

• Geolocation: Washington, District of Columbia, US
• DNS PTR: 182.112.245.35.bc.googleusercontent.com
• Services: No open ports detected (firewalled)
• Email Auth: SPF and DMARC configured
• BGP Prefix: 35.245.112.0/20
• Route Stability: Unstable (isRouteStable: false)
• DNSSEC: Valid
• DNSBL Listings: 2 of 8 total lists

## Threat Assessment

• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Blacklist Count: 2
• Threat Persistence: No persistent malicious activity detected
• Campaign Likelihood: No correlated campaigns identified

## Neighborhood Analysis

• Subnet: 35.245.112.0/24
• Abuse Density: 0.5 (moderate)
• Classification: Mostly Clean
• Active Siblings: 1 of 2 total
• Notable Neighbor: 35.245.112.52 (Risk: 25, Authority: 90)

## Historical Signals

• Total Observations: 19
• Recent Activity: All observations from 2026-08-13
• Ownership Changes: 0 (stable ownership)
• Threat Observation Count: 0
• Geolocation Consensus: True (multiple sources agree on US/Washington)

## SOC Recommendations

1. Monitoring: Monitor for unusual outbound connections from this IP, particularly if it appears in connection logs outside expected Google Cloud patterns

2. DNSBL Review: Investigate the 2 DNSBL listings to understand the nature of the flags

3. Traffic Analysis: Expect no open ports; any service exposure would be anomalous

4. Context: Legitimate cloud infrastructure; false positive risk elevated due to DNSBL presence

## Conclusion

This IP represents standard Google Cloud infrastructure with moderate risk classification. The DNSBL listings warrant investigation but do not indicate active malicious activity. Traffic from this IP should be permitted with standard logging, with attention paid to any deviation from expected cloud hosting patterns.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.