# IP Intelligence Briefing: 209.85.223.129
## Executive Summary
Classification: LOW RISK / LEGITIMATE INFRASTRUCTURE
The target IP 209.85.223.129 is a Google-owned cloud compute address associated with legitimate mail infrastructure. No malicious indicators detected.
---
## Infrastructure Profile
| Attribute | Value |
|---|---|
| **Owner** | Google LLC (ASN 15169) |
| **Network Block** | 209.85.128.0/17 |
| **Geolocation** | United States (ARIN) |
| **Role** | Cloud Compute / Hosting |
| **Risk Score** | 0 (Low Risk) |
| **Reputation** | Legitimate |
---
## Technical Observations
- DNS Resolution: mail-io0-f129.google.com (Google mail infrastructure)
- Email Authentication: SPF and DMARC records present
- Service Exposure: Firewalled/No services open
- Infrastructure Type: Cloud compute with hosting designation
- Route Stability: Stable BGP routing (AS Path: 15169)
---
## Threat Indicators
- Threat Score: 0/100
- Blacklist Status: Not listed (0/8 DNSBLs)
- Known Campaigns: None
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Abuse Confidence Score: N/A (clean)
---
## Neighborhood Analysis (209.85.223.0/24)
- Abuse Density: 0 (Clean subnet)
- Total Siblings: 2
- Active Siblings: 1
- Threat Siblings: 0
- Notable Neighbor: 209.85.223.192 (Risk Score: 25, Authority Score: 90)
---
## Historical Signals
- Total Observations: 18 signals
- Recent Activity: Monitoring scans detected 2026-07-29
- Ownership Changes: 0 (Stable ownership)
- Threat Persistence: None observed
- Classification: Not persistently malicious
---
## Recommended Actions
NO BLOCKING RECOMMENDED
This IP represents legitimate Google infrastructure. No firewall rules or blocking actions required. The address is associated with standard mail infrastructure (mail-io0-f129.google.com) and shows no malicious behavior patterns.
SOC Analyst Guidance: Treat as benign infrastructure. No correlation with known threat campaigns or malicious activity observed in monitoring systems.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Google LLC |
| ASN | AS15169 |
| Network Name | |
| CIDR Block | 209.85.128.0/17 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | mail-io0-f129.google.com |
| Forward Confirmed | No β PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | mail-io0-f129.google.com |
π DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Present |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting β Infrastructure provider without advanced routing |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-07-22 19:32:53 UTC |
| Last Seen | 2026-08-06 06:40:11 UTC |
| Profile Built | 2026-08-05 18:29:23 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 21 |
Full dossier details are available via our API.