35.205.92.108📋 Copy

## IP Intelligence Briefing: 35.205.92.108/32

Classification: Low Risk | Status: Legitimate Cloud Infrastructure

Executive Summary

IP address 35.205.92.108 is identified as legitimate Google Cloud infrastructure with a low overall risk score of 25. The IP exhibits characteristics consistent with cloud-hosted services and presents no malicious threat indicators.

Technical Profile

• Organization: Google LLC (ASN: 396982)
• Network: 35.192.0.0/12 (GOOGLE-CLOUD)
• Geolocation: Brussels, Belgium (50.85°N, 4.35°E)
• Service Purpose: Single-Service Host
• Infrastructure Type: Cloud Provider (Google Cloud)

Network Services

• Open Ports: TCP/22 (SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.16)
• DNS Resolution: 108.92.205.35.bc.googleusercontent.com
• Reverse DNS: Confirmed forward resolution
• Email Auth: SPF and DMARC records present

Threat Assessment

• Risk Score: 25 (Low)
• Threat Indicators: None detected
• Blacklist Status: 1 listing out of 8 DNSBL lists
• Known Campaigns: None
• Tor/Proxy: Not a Tor exit node, not a proxy
• Abuse Confidence: Not applicable

Historical Analysis

Sixteen signal observations recorded. The IP maintains consistent ownership attribution to Google LLC. Geographic data shows some variation (Brussels, BE vs US locations in historical records), which is common for cloud infrastructure with global routing. No persistent malicious behavior observed over the observation period.

Relationship Mapping

• DNS Associations: 108.92.205.35.bc.googleusercontent.com (repeated entries)
• Network Relationship: GOOGLE-CLOUD subnet
• Related Entities: No additional suspicious associations detected

Neighborhood Analysis

Subnet 35.205.92.108/24 analysis shows:

• Abuse Density: 0%
• Active Siblings: 0
• Threat Siblings: 0
• Risk Distribution: All neighbors classified as low risk

Control Plane

• BGP Prefix: 35.205.80.0/20
• Route Stability: Unstable (route changes detected in 30-day period)
• RPKI State: Not validated
• DNSSEC: Valid
• CAA Records: Present

Recommended Actions

Based on the low-risk profile and legitimate cloud infrastructure classification:

• No blocking recommended
• Monitor for unexpected behavior patterns
• Allow inbound SSH traffic if legitimate services exist
• No firewall rules required for this IP

Intelligence Narrative

This IP address represents standard Google Cloud infrastructure. The combination of risk score 25, zero threat indicators, and confirmed cloud provider attribution indicates benign traffic. The geographic location in Brussels aligns with Google's European cloud presence. The single DNSBL listing is minor and does not impact overall risk posture. SOC teams should treat this IP as trusted infrastructure and focus on monitoring for behavioral anomalies rather than applying blocking measures.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.