35.208.158.56📋 Copy

# IP INTELLIGENCE BRIEFING: 35.208.158.56/32

## Executive Summary

IP 35.208.158.56 is a Google Cloud infrastructure endpoint associated with the achfoods.mx domain. The IP carries a moderate risk score of 40 and demonstrates standard cloud service patterns with no active threat indicators. The subnet environment is classified as mostly clean with minimal abuse activity.

## Ownership and Infrastructure

• Organization: Google LLC (ASN 19527)
• Infrastructure Type: CloudCompute (Google Cloud Platform)
• Geolocation: Council Bluffs, IA, US (Americas/Chicago timezone)
• CIDR Block: 35.208.158.56/24
• Registration: ARIN RIR registry

## Network Classification

• Provider: Google Cloud
• Hosting: Yes (Cloud hosting environment)
• CDN: No
• Proxy/VPN/Tor: No
• Mobile/Residential: No
• Bogon: No
• Anycast: No

## DNS and Service Analysis

• PTR Hostname: 56.158.208.35.bc.googleusercontent.com
• Associated Domain: achfoods.mx (reverse DNS)
• Forward Resolution: googleusercontent.com (forward confirmed)
• Email Authentication: No SPF/DMARC records configured for achfoods.mx
• Open Ports: TCP/80 (HTTP), TCP/443 (HTTPS), TCP/22 (SSH)
• TLS Certificate: Let's Encrypt (R12), Subject CN=achfoods.mx

## Threat Indicators

• Risk Score: 40 (Moderate)
• Threat Indicators: None detected
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0
• Campaign Correlation: None identified

## Control Plane Observations

• DNSBL Listings: 2 of 8 total lists
• RPKI State: Not verified
• BGP Stability: Not route-stable
• DNSSEC: Valid
• CAA Records: Present
• Operator Score: 0.3478 (Basic)

## Neighborhood Assessment

• Subnet: 35.208.158.56/24
• Abuse Density: 1 (Low)
• Classification: Mostly Clean
• Threat Siblings: 1
• Active Siblings: 1

## Historical Observations

Analysis of 24 signal observations reveals:

• Recent Activity: Observations from June 26, 2026 showing DNS resolution to achfoods.mx
• Email Authentication: Domain shows no SPF/DMARC configuration
• Geolocation Consistency: Multiple sources confirm Council Bluffs, IA location
• Connection Status: Historical connection failures noted (June 19, 2026)
• Threat Persistence: Not persistently malicious

## Security Recommendations

Based on the IP's moderate risk profile and Google Cloud infrastructure context:

• Recommended Action: Monitor but no immediate blocking required
• Firewall Rules: No specific rules generated (standard cloud infrastructure)
• Email Authentication: Domain achfoods.mx lacks SPF/DMARC - consider requesting proper email security configuration
• SSH Access: Port 22 is open - verify if SSH access is required from external networks
• Monitoring: Continue monitoring for DNSBL listing changes

## Analyst Notes

This IP represents legitimate Google Cloud infrastructure hosting the achfoods.mx domain. The moderate risk score is primarily due to the DNSBL listings and lack of email authentication records rather than active malicious activity. The subnet environment is clean with minimal abuse density. Standard cloud infrastructure monitoring practices are recommended.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.