35.252.162.16📋 Copy

# IP Intelligence Briefing: 35.252.162.16/32

## Executive Summary

IP 35.252.162.16 is a low-risk infrastructure address belonging to Google Cloud infrastructure. The IP shows no active threat indicators and represents legitimate cloud-hosted services.

## Ownership and Network Classification

• Organization: Google LLC (ASN 396982)
• Network: GOOGL-2 (35.252.0.0/14)
• Geolocation: The Dalles, Oregon, US (45.6°N, 121.19°W)
• Classification: Google Cloud Infrastructure, Firewalled/No Services

## Risk Assessment

• Overall Risk Score: 25 (Low Risk)
• Provider Score: 0
• Authority Score: 0
• Abuse Confidence: Not applicable (legitimate infrastructure)
• Blacklist Status: Listed on 1 of 8 DNSBLs (dnsblListedCount: 1)

## Technical Profile

• DNS Resolution: 16.162.252.35.bc.googleusercontent.com (forward confirmed)
• PTR Record: 16.162.252.35.bc.googleusercontent.com
• Open Ports: None detected
• HTTP/HTTPS Services: No active services exposed
• TLS Certificates: None detected
• Anycast Status: No

## Threat Indicators

• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Active Threat Campaigns: None
• Scan Activity: Not observed

## Historical Analysis

Sixteen observations collected since initial indexing. Signals have remained consistent:

• Ownership attribution to Google LLC maintained
• Geolocation consistently mapped to The Dalles, OR, US
• No ownership changes detected
• No persistent malicious behavior observed
• Control plane shows route instability (isRouteStable: false)

## Neighborhood Analysis

• Subnet: 35.252.162.16/24
• Abuse Density: 0
• Siblings: 0
• Threat Siblings: 0
• Risk Distribution: No high or medium risk neighbors identified

## Recommended Actions

No remedial actions recommended. The IP represents legitimate Google Cloud infrastructure with low risk profile. Standard allow-listing for Google Cloud ranges is appropriate for defensive posture.

## SOC Analyst Notes

This IP belongs to Google's Cloud infrastructure and should be treated as legitimate traffic source. No indicators suggest malicious activity. The single DNSBL listing appears to be a false positive given the low overall risk score and absence of other threat signals.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.