Intelligence Briefing for IP Address: 35.252.140.11/32
Overview:
The IP address 35.252.140.11/32 is associated with Google LLC, specifically within Google's data center infrastructure. The IP is part of Google Cloud services and is geographically located in the United States. The network is known for hosting a wide array of cloud-based applications and services.
Observation History:
- The IP address has been consistently active and utilized by Google for cloud services.
- There have been no significant anomalies or malicious activities reported in association with this IP in the observation history.
- The usage pattern aligns with typical cloud infrastructure operations, including data processing and content delivery.
Relationships:
- The IP is part of a broader network of Google Cloud IPs, often interacting with other Google services and infrastructure.
- It has been observed to establish connections with various client IPs globally, indicative of normal service requests to Google Cloud services.
Neighborhood Data:
- The IP is situated within a network range known for Google's data centers, surrounded by other IPs used for similar cloud services.
- Neighboring IPs are primarily involved in legitimate data center operations and have not been linked to any known malicious activities.
Threat Intelligence Narrative:
The IP address 35.252.140.11 is a legitimate component of Google's cloud infrastructure, serving as a node within Google Cloud services. The consistent activity and interaction patterns observed align with expected behaviors for a data center IP. There is no evidence of malicious intent or activity associated with this IP in the available data. SOC teams should consider this IP as part of legitimate Google operations when analyzing network traffic involving cloud service interactions. Any alerts or anomalies should be cross-referenced with known legitimate traffic patterns to avoid false positives.
Actionable Insights:
- Monitor traffic patterns to and from this IP for deviations from normal behavior, which may indicate misuse.
- Maintain awareness of Google Cloud IP ranges for accurate network traffic analysis.
- Consider whitelisting this IP for services known to interact with Google Cloud to reduce alert noise.
This intelligence provides a comprehensive understanding of the IP address's role within Google's infrastructure, supporting informed decision-making in network defense operations.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | β |
| CIDR Block | β |
| RIR | ARIN |
| Country | β |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 11.140.252.35.bc.googleusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 11.140.252.35.bc.googleusercontent.com |
π DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting β Infrastructure provider without advanced routing |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 15% | 2 | 2 |
| ownership | 24% | 2 | 3 |
| reputation | 26% | 1 | 3 |
| geolocation | 25% | 2 | 2 |
| Overall | 21% | 10 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-05-19 09:37:35 UTC |
| Last Seen | 2026-06-28 08:50:35 UTC |
| Profile Built | 2026-06-29 02:54:32 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 25 |
Full dossier details are available via our API.