35.184.99.209📋 Copy

# IP Intelligence Briefing: 35.184.99.209/32

Classification: Low Risk Infrastructure Node

Date: June 2026

Source: IPDebrief Intelligence Platform

---

## Executive Summary

IP address 35.184.99.209 is a low-risk infrastructure address associated with Google Cloud Platform (Google LLC, ASN 396982). The address operates as a cloud compute resource with no open services and is part of the 35.184.96.0/19 BGP prefix. Current risk assessment scores 25 (Low), with no active threat indicators or blacklist listings.

---

## Technical Profile

Ownership & Network Classification

• Organization: Google LLC
• ASN: 396982
• Infrastructure Type: Cloud Compute
• Service Provider: Google Cloud Platform
• RIR: ARIN
• CIDR Block: 35.184.96.0/19
• Geographic Region: United States (Council Bluffs, IA)

Network Role

• Cloud Infrastructure: Yes
• CDN: No
• Hosting/Residential/Proxy: No
• Status: Firewalled / No Services Exposed

DNS Analysis

• PTR Hostname: 209.99.184.35.bc.googleusercontent.com
• Forward Resolution: Confirmed
• Domain: googleusercontent.com
• DNSSEC: Valid
• Email Authentication: SPF and DMARC records present

---

## Risk Assessment

Control Plane Indicators

• Operator Score: 0.3478 (Basic)
• Route Stability: Unstable
• DNSBL Listings: 1 of 8 total lists
• RPKI/IRR: Consistency pending verification

---

## Threat Intelligence

Active Threat Indicators

• Threat Indicators: None detected
• Known Campaigns: None
• Threat Feeds: None
• Malicious Persistence: Not persistently malicious

Neighborhood Analysis (35.184.99.0/24)

• Abuse Density: 1 (Low)
• Classification: Mostly Clean
• Total Siblings: 1
• Active Siblings: 0
• Threat Siblings: 1
• Inherited Risk: 2

---

## Historical Observation Trend

Recent signal observations (June 2026) show:

• ASN Resolution: Consistent Google Cloud Platform attribution
• Ownership Changes: None detected
• Threat Observation Count: 1
• Geolocation Consensus: Validated

The IP demonstrates stable infrastructure characteristics with no evidence of malicious activity escalation over the observation period.

---

## Security Posture & Recommendations

Network Behavior

• Open Ports: None detected
• HTTP/TLS Services: None accessible
• Certificate Status: No TLS certificate associated
• Service Banner: None

Firewall/Security Actions

• Recommended Actions: None required
• Firewall Rules: No specific blocking rules recommended
• Risk-Based Mitigation: Not warranted given low-risk classification

SOC Analyst Notes

This IP address represents legitimate Google Cloud infrastructure. The absence of open services and lack of threat indicators suggests this is a standard cloud endpoint, possibly part of Google's internal infrastructure or customer-facing compute node. No defensive actions are currently required.

---

## Related Entities

DNS Associations

• 209.99.184.35.bc.googleusercontent.com (repeated association)

Network Relationships

• Same Network: GOOGLE-CLOUD (multiple instances)

---

## Conclusion

IP 35.184.99.209 is a low-risk Google Cloud infrastructure address with no active threat indicators. The address exhibits standard cloud compute behavior with no exposed services. SOC teams may treat this as benign infrastructure traffic without requiring special attention or blocking measures.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.