# IP Intelligence Briefing: 35.205.128.167/32
Classification: Low Risk / Legitimate Cloud Infrastructure
Generated: August 2026
Analyst Priority: Routine Monitoring
---
## Executive Summary
IP address 35.205.128.167 is a Google Cloud Infrastructure endpoint with a risk score of 25 (Low Risk). The address shows no malicious indicators, threat feed matches, or known attack campaigns. This is a legitimate cloud computing resource with stable ownership under Google LLC (ASN 396982).
---
## Network Profile
| Attribute | Value |
|---|---|
| **Organization** | Google LLC (GOOGLE-CLOUD) |
| **ASN** | 396982 |
| **CIDR Block** | 35.192.0.0/12 |
| **Country/Region** | BE (Belgium) / St. Ghislain |
| **Infrastructure Type** | CloudCompute |
| **DNS PTR** | 167.128.205.35.bc.googleusercontent.com |
| **Forward Resolution** | googleusercontent.com |
---
## Threat Indicators
- Risk Score: 25 (Low Risk)
- Blacklist Count: 0
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Threat Feeds: None detected
- DNSBL Listed: 1 of 8 (likely legitimate provider listing)
No active threat campaigns or correlated malicious activity observed. The IP shows no evidence of being used for scanning, brute force, or credential harvesting.
---
## Historical Analysis
23 observations collected over the monitoring period. The IP demonstrates consistent low-risk characteristics with no significant temporal shifts in threat profile. Routing stability is marked as "not stable," but this is typical for cloud infrastructure with dynamic routing. No ownership changes or persistent malicious activity detected.
---
## Network Neighborhood (35.205.128.0/24)
- Abuse Density: 0%
- Classification: Clean
- Total Siblings: 3
- Active Siblings: 2
- Threat Siblings: 0
Neighbor analysis confirms the subnet is clean with two adjacent IPs (35.205.128.45, 35.205.128.136) both showing low-risk profiles (score 25). No correlated abuse patterns across the /24.
---
## Service Footprint
No open ports or listening services detected. The IP appears to be configured as a firewalled cloud endpoint with no exposed services, which is consistent with Google Cloud infrastructure security posture.
---
## Security Recommendations
Action Required: None recommended for this IP.
This address represents legitimate Google Cloud infrastructure. Standard cloud provider trust policies apply:
- Allow traffic from this IP if it matches your organization's cloud provider whitelist
- No firewall rules needed for blocking
- No threat hunting actions required
---
## Conclusion
35.205.128.167 is a benign Google Cloud infrastructure IP with no malicious indicators. SOC teams should treat this as trusted cloud traffic. No further investigation or blocking actions warranted.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGLE-CLOUD |
| CIDR Block | 35.192.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | 167.128.205.35.bc.googleusercontent.com |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | 167.128.205.35.bc.googleusercontent.com |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 3 |
| routing | 17% | 1 | 1 |
| services | 24% | 2 | 2 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 35% | 2 | 3 |
| Overall | 27% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-08-03 11:22:29 UTC |
| Last Seen | 2026-08-13 05:04:56 UTC |
| Profile Built | 2026-08-13 05:15:47 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 26 |
Full dossier details are available via our API.