35.252.43.66📋 Copy

# IP Intelligence Briefing: 35.252.43.66/32

## Executive Summary

IP 35.252.43.66 is Google Cloud infrastructure with a Low Risk classification (Score: 25). The address resolves to Google-owned hosting infrastructure with no active threat indicators.

## Ownership and Infrastructure

• Organization: Google LLC (ASN: 396982)
• Network: GOOGL-2 (CIDR: 35.252.0.0/14)
• Infrastructure Type: Google Cloud Platform (CloudCompute)
• Registration: ARIN registry

## Geolocation

• Country: Saudi Arabia (SA)
• City: Dammam
• Region: Eastern Province
• Accuracy Radius: 2,500km

## Network Role and Classification

• Classification: Cloud Compute / Hosting
• Connection Type: Cloud infrastructure
• Anycast: No
• ISP/Hosting: Yes (Google Cloud)

## DNS Resolution

• PTR Hostname: 66.43.252.35.bc.googleusercontent.com
• Domain: googleusercontent.com
• Forward Resolution: Confirmed
• Email Auth: SPF and DMARC configured

## Threat Assessment

• Risk Score: 25 (Low Risk)
• Abuse Confidence Score: Not reported
• Known Attacker: No
• Spam Source: No
• Tor Exit: No
• Blacklist Count: 0
• Threat Feeds: None detected

## Network Neighborhood Analysis (35.252.43.66/24)

• Abuse Density: 0
• Subnet Classification: Mostly Clean
• Threat Siblings: 1 detected
• Inherited Risk Score: 2
• Total Siblings: 1

## Historical Observations

• Total Observations: 24 signals recorded
• Most Recent Activity: 2026-08-12
• Notable Events:

- 2026-08-05: DNS blacklist listings detected (1 of 8 lists)

- 2026-08-05: Subnet abuse density signal recorded

- No persistent malicious activity detected

## Control Plane Data

• BGP Prefix: 35.252.32.0/19
• Route Stability: Unstable
• MOAS Detection: No
• RPKI State: Not reported
• IRR Consistency: Not reported

## Security Actions

No specific firewall rules or blocking recommendations generated due to low risk profile. No actionable threats identified.

## Intelligence Assessment

This IP represents legitimate Google Cloud infrastructure hosting services. While historical data shows transient DNS blacklist activity on 2026-08-05, current threat indicators are minimal. The subnet environment shows low abuse density with one threat sibling detected.

Recommendation: No immediate action required. Monitor for escalation of threat indicators if activity patterns change. The infrastructure type (Google Cloud) suggests this is likely legitimate cloud service hosting rather than malicious infrastructure.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.