## INTELLIGENCE BRIEFING: 35.254.38.92/32
Classification: LOW RISK - Legitimate Cloud Infrastructure
Date of Analysis: June 2026
Analyst: IPDebrief Intelligence Team
---
EXECUTIVE SUMMARY
IP address 35.254.38.92/32 is identified as legitimate Google Cloud Platform infrastructure with no malicious indicators. The IP operates as a firewalled cloud compute resource with a risk score of 0.0 and zero threat indicators across all monitored threat feeds.
OWNERSHIP & GEOLOCATION
- Organization: Google LLC (ASN: 396982)
- Network: GOOGL-2 (35.252.0.0/14)
- Location: Council Bluffs, Iowa, United States
- Registration: ARIN registry
- Infrastructure Type: Cloud Compute (Google Cloud Platform)
THREAT INTELLIGENCE
Risk Assessment:
- Overall Risk Score: 0/100
- Abuse Confidence Score: Not applicable (clean infrastructure)
- Blacklist Status: 0/8 DNS blacklist listings
- Known Attacker Status: False
- Spam Source Status: False
- Tor Exit Node Status: False
Threat Indicators: None detected across monitored threat feeds and campaign correlations.
NETWORK CHARACTERISTICS
- DNS Resolution: 92.38.254.35.bc.googleusercontent.com (googleusercontent.com)
- PTR Record: Reverse DNS confirms Google infrastructure
- Open Services: None detected (firewalled configuration)
- HTTP/TLS: No active services exposed
- Anycast Deployment: No (standalone infrastructure)
NEIGHBORHOOD ANALYSIS
The /24 subnet (35.254.38.92/24) demonstrates:
- Abuse Density: 0%
- Risk Distribution: All neighbors classified as low risk
- Active Siblings: 1 threat-sibling identified in broader network context
- Overall Classification: Mostly clean
OBSERVATION HISTORY
19 signal observations recorded with consistent patterns:
- ASN routing confirmed as GOOGL-2 (Google Cloud Platform)
- Geolocation consistently resolves to Council Bluffs, IA
- DNS blacklist monitoring: 8 total lists monitored, 0 current listings
- Operator Score: 0.3478 (Basic classification)
- No evidence of persistent malicious behavior
RELATIONSHIP MAPPING
56 relationship entities identified:
- Primary DNS associations: 92.38.254.35.bc.googleusercontent.com
- Network associations: GOOGL-2 internal routing
- Certificate and hostname correlations: Minimal (cloud infrastructure)
RECOMMENDED ACTIONS
Security Posture: No blocking or filtering required. This IP represents legitimate cloud infrastructure.
Firewall Rules: None recommended. The IP operates as a firewalled cloud resource with no exposed services.
Monitoring: Standard logging recommended for traffic patterns, but no anomaly detection required.
CONCLUSION
35.254.38.92 is classified as LOW RISK Google Cloud infrastructure. The IP exhibits characteristics of legitimate cloud compute resources: firewalled configuration, clean reputation, no threat indicators, and proper DNS resolution to Google's content delivery infrastructure. No defensive actions required.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | β |
| CIDR Block | β |
| RIR | ARIN |
| Country | β |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 92.38.254.35.bc.googleusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 92.38.254.35.bc.googleusercontent.com |
π DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting β Infrastructure provider without advanced routing |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 4 |
| routing | 45% | 1 | 7 |
| services | 15% | 2 | 2 |
| ownership | 20% | 2 | 3 |
| reputation | 28% | 1 | 3 |
| geolocation | 21% | 2 | 2 |
| Overall | 27% | 10 | 21 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-05-18 21:28:25 UTC |
| Last Seen | 2026-06-28 08:02:59 UTC |
| Profile Built | 2026-06-29 02:07:55 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 30 |
Full dossier details are available via our API.