35.190.72.41
Intellectelligence Briefing: 35.190.72.41/32
Overview
The IP address 35.190.72.41 was observed on 2026-09-13 with a Low Risk reputation score of 25. Ownership records attributed the address to Google LLC (ASN 396982) within the GOOGLE-CLOUD network (35.184.0.0/13). The address was flagged as a "Suspicious Host" due to signal incoherence (Coherence Score: 48) and contradictory profile data.
Technical Profile
Network scans identified open ports 80 (HTTP) and 443 (HTTPS). A TLS certificate issued by Sectigo Limited validated the domain `*.di.atlas.samsung.com` for the subject `di.atlas.samsung.com`. DNS hygiene was rated Excellent, with SPF and DMARC authentication enabled. The IP appeared in one DNSBL list out of eight monitored sources.
Anomaly Analysis
Multiple contradictions were recorded in the profile data. Primary geolocation sources placed the host in Kansas City, Missouri, while the TLS certificate indicated South Korea (Gyeonggi-do). Furthermore, the observed RTT (22ms) contradicted the physical distance implied by the US location (minimum expected RTT: 152.5ms). The address was associated with a BGP prefix (35.190.0.0/16) lacking valid RPKI or IRR consistency.
Recommendation
The profile indicated an unreliable security posture due to conflicting signal data. Analysts recommended applying rate-limiting rules to mitigate potential abuse associated with the contradictory profile.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGLE-CLOUD |
| CIDR Block | 35.184.0.0/13 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 41.72.190.35.bc.googleusercontent.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | 41.72.190.35.bc.googleusercontent.com |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | 4/4 domains |
| DMARC | 4/4 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Present |
| Domains Checked | 4 domains |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.di.atlas.samsung.comdi.atlas.samsung.com |
| Valid From | 2026-03-18T00:00:00+00:00 |
| Valid Until | 2026-10-02T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 198 days |
| Serial Number | 21B348C2A338BA9C3441C6782B0DD2BF |
| Thumbprint | B55431E914F36F0C2B507FF3D74801152376ED2D |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 42% | 2 | 6 |
| ownership | 27% | 2 | 3 |
| reputation | 22% | 1 | 3 |
| geolocation | 38% | 2 | 5 |
| Overall | 28% | 10 | 21 |
| Data Coherence | Contradictory (48%) — 3 contradiction(s) |
| Attribution | Low (40%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
⚠ Geo sources disagree on country: KR, US
⚠ TLS certificate claims KR but primary geo says US
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-05 16:23:09 UTC |
| Last Seen | 2026-09-23 02:06:35 UTC |
| Profile Built | 2026-09-23 02:16:48 UTC |
| Data Freshness | Live |
| Signal Types | 27 |
| Total Observations | 45 |
Full dossier details are available via our API.