35.189.222.65📋 Copy

# IP Intelligence Briefing: 35.189.222.65/32

## Executive Summary

The IP address 35.189.222.65/32 is associated with Google Cloud infrastructure (ASN 396982) and presents a low-risk profile. No active threat indicators, blacklist listings, or malicious behavior have been observed. No defensive actions are currently recommended.

## Infrastructure Profile

• Ownership: Google LLC, ORGANIZATION: GOOGLE-CLOUD
• ASN: 396982 (GOOGLE-CLOUD)
• CIDR Block: 35.184.0.0/13
• Geolocation: United States, New York (geoSourceCount: 1)
• Network Role: Cloud Provider Infrastructure
• Registration: ARIN RIR

## Threat Assessment

• Risk Score: 0/100 (Low Risk)
• Abuse Confidence Score: Not applicable
• Blacklist Status: 0 listings across threat feeds
• Known Campaigns: None detected
• Tor Exit/Proxy: Not identified
• Known Attacker: No association detected

The IP exhibits no threat indicators across all monitored threat feeds. No evidence of spam source activity, known campaign participation, or attacker attribution.

## Network Activity

• Services Detected: None (Firewalled / No Services)
• Open Ports: Empty
• TLS Certificate: Not detected
• HTTP Service: No banner detected
• Connection Type: Firewalled

The absence of detectable services indicates proper security hardening or cloud infrastructure isolation.

## DNS Analysis

• PTR Hostname: 65.222.189.35.bc.googleusercontent.com
• Forward Resolution: Confirmed
• Domain: googleusercontent.com
• Email Authentication: SPF and DMARC records present
• Forward Hostnames: 1 record confirmed

## Relationship Network

• DNS Associations: 65.222.189.35.bc.googleusercontent.com (2 associations)
• Network Relationships: GOOGLE-CLOUD (Same Network)
• Related Entities: 3 total relationships identified

The relationship graph indicates standard cloud infrastructure associations with no anomalous external connections.

## Subnet Intelligence

• Subnet: 35.189.222.65/24
• Abuse Density: 0 (No detected abuse in neighborhood)
• Risk Distribution: No high, medium, or low-risk neighbors detected
• Total Siblings: 0 (Discovery limitations)

The /24 subnet shows no elevated abuse activity in the neighborhood analysis.

## Historical Signal Observations

Total of 16 observations recorded. Recent signals (2026-07-29) indicate:

• Ownership: Stable (0 changes)
• Registry: ARIN
• Geolocation: Consistent with US/Google Cloud infrastructure
• Blacklist Activity: 8 referenced lists, 0 actual listings
• Threat Persistence: 0 days (no persistent malicious behavior)

Temporal analysis shows no ownership changes and no threat persistence indicators.

## Recommended Actions

No immediate defensive actions are recommended. The IP presents a legitimate cloud infrastructure profile with no risk factors requiring mitigation.

Monitoring Parameters: Continue standard monitoring for any changes in risk score, new blacklist listings, or unexpected service activity.

---

*This briefing was generated using IPDebrief intelligence tools. Data reflects observations as of the latest available collection.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.