35.205.138.113📋 Copy

# IP Intelligence Briefing: 35.205.138.113/32

Classification: Google Cloud Infrastructure

Risk Assessment: Low Risk

Report Date: Current

## Executive Summary

IP 35.205.138.113 is a low-risk (Risk Score: 25) Google Cloud infrastructure endpoint. The address resolves to googleusercontent.com and operates as a web server (443/HTTPS). No active threat indicators or malicious campaign associations were identified.

## Infrastructure Profile

• Organization: Google LLC (ASN: 396982)
• Network Block: 35.192.0.0/12 (GOOGLE-CLOUD)
• Geolocation: Belgium (BE), St. Ghislain, Walloon Region
• Service Role: Web Server / Cloud Infrastructure
• Infrastructure Type: Cloud Provider (not CDN, proxy, or VPN)

## Technical Services

• Open Ports: TCP/443 (HTTPS)
• TLS Certificate: Self-signed certificate with Kubernetes service name SANs (kubernetes.default, kubernetes.default.svc)
• HTTP Status: 403 (Forbidden)
• DNS Resolution: 113.138.205.35.bc.googleusercontent.com (confirmed)
• DNSSEC: Valid
• CAA Records: Present

## Threat Intelligence Indicators

• Blacklist Status: 0 active blacklists; 1 DNSBL listing out of 8 total lists
• Threat Indicators: None detected
• Abuse Confidence Score: Not elevated
• Known Campaigns: No associations
• Tor/Proxy: Not identified as Tor exit node, proxy, or hosting service
• Risk Breakdown: Low Risk reputation with minimal operational concerns

## Control Plane Analysis

• Route Stability: Not stable (isRouteStable: false)
• Operator Score: 0.3478 (Basic classification)
• RPKI State: Not assessed
• BGP Prefix: 35.205.128.0/20

## Observation History

Total observations recorded: 25

• Recent Activity: Observations from June 2026
• Signal Confidence: Ranges 0.23–0.60
• Coverage: Geolocation, routing, services, ownership, reputation, and geolocation dimensions assessed
• Threat Persistence: No persistent malicious behavior observed (0 threat persistence days)

## Neighborhood Assessment

• Subnet: 35.205.138.113/24
• Abuse Density: 0 (no abuse detected in neighborhood)
• Risk Classification: mostly_clean
• Active Siblings: 1
• Threat Siblings: 1

## Relationship Graph

• DNS Associations: 37 total relationships, primarily DNS hostname associations to 113.138.205.35.bc.googleusercontent.com
• Organizational Links: None beyond Google Cloud infrastructure
• Certificate Subjects: Kubernetes-related service principals

## Recommended Actions

Based on the low-risk profile and legitimate cloud infrastructure classification:

• Firewall Rules: No blocking required; standard cloud egress/ingress policies apply
• Monitoring: Routine traffic monitoring appropriate; no elevated alerting recommended
• Threat Hunting: No immediate threat hunting required

## Conclusion

IP 35.205.138.113 represents legitimate Google Cloud infrastructure hosting web services. The low risk score, absence of threat indicators, and cloud provider context indicate this is not a malicious endpoint. Routine defensive monitoring is appropriate; no blocking or restrictive firewall rules are warranted.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.