35.195.23.219📋 Copy

# IP Intelligence Briefing: 35.195.23.219/32

## Executive Summary

The target IP 35.195.23.219 is a Google Cloud infrastructure endpoint with a low-risk profile (score: 25). The address belongs to Google LLC (AS396982) and operates within the Google Cloud network. No active threat indicators were detected, though the IP was listed on one DNSBL. The subnet shows moderate inherited risk with one threat sibling observed.

## Infrastructure Profile

• Organization: Google LLC
• ASN: 396982
• Network Role: CloudCompute / Hosting
• Geolocation: US (Brussels region)
• Infrastructure Type: Cloud infrastructure with stable BGP routing (35.195.16.0/20)
• Control Plane: Route stable, DNSSEC valid, RPKI status pending

## Service Exposure

• Open Ports: TCP/443 (HTTPS)
• HTTP Version: HTTP/2.0 enabled
• TLS Configuration: TLS 1.3 (TLS_AES_128_GCM_SHA256)
• Certificate: Valid certificate issued for 34.156.205.131, SANs include Kubernetes service entries
• DNS: PTR resolves to 219.23.195.35.bc.googleusercontent.com, forward resolution confirmed
• Email Auth: SPF and DMARC records present

## Threat Intelligence Assessment

• Risk Score: 25 (Low Risk)
• Abuse Confidence: None reported
• Known Campaigns: None
• Threat Feeds: No matches
• Blacklist Status: Listed on 1 of 8 DNSBLs
• Campaign Likelihood: None
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

## Neighborhood Analysis

Subnet 35.195.23.219/24 classification: mostly_clean

• Total Siblings: 1
• Active Siblings: 1
• Threat Siblings: 1
• Abuse Density: 1
• Inherited Risk: 2

## Historical Observation (Last 30 Observations)

Recent telemetry shows signal progression from minimal to moderate risk indicators:

• 2026-06-28: Minimal risk signals (confidence: 0.30)
• 2026-06-19: Moderate risk control plane signals (confidence: 0.85)
• HTTP response: Status 401 (unauthorized), Response time: 310ms
• Fingerprint: HTTP/2.0, HTTP/2 headers present

## Related Entities

• DNS Association: 219.23.195.35.bc.googleusercontent.com
• Network Associations: Multiple GOOGLE-CLOUD network references
• Relationship Count: 285 total relationship records

## SOC Analyst Recommendations

No immediate firewall blocking or blocking rules recommended. The IP demonstrates legitimate cloud infrastructure behavior with proper TLS configuration and DNS setup. Monitor for any changes in threat indicators or neighborhood activity. Standard Google Cloud traffic handling applies.

---

*Data sourced from IPDebrief intelligence platform. Analysis generated for defensive security operations.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.