35.221.200.134📋 Copy

# IP Intelligence Briefing: 35.221.200.134

## Executive Summary

IP address 35.221.200.134 is classified as a Low Risk (Score: 25) Google Cloud infrastructure resource with no active threat indicators. The IP operates as a single-service host with SSH exposure and maintains a clean neighborhood profile.

## Risk Assessment

• Overall Risk Score: 25/100 (Low Risk)
• Provider Risk: 0/100
• Authority Risk: 0/100
• Abuse Confidence: Not applicable
• Blacklist Status: 0 lists

## Infrastructure Profile

## Network Services

• Port 22/tcp (SSH): Active - OpenSSH_9.6p1 Ubuntu-3ubuntu13.18
• Reverse DNS: 134.200.221.35.bc.googleusercontent.com
• Domain Association: googleusercontent.com
• Email Authentication: SPF and DMARC records present

## Control Plane Analysis

• BGP Prefix: 35.221.192.0/20
• Route Stability: Unstable (route changes detected in last 30 days)
• DNSBL Lists: 1 of 8 total lists
• Operator Score: 0.3478 (Basic)
• RPKI Status: Not verified
• DNSSEC: Valid

## Neighborhood Analysis

• Subnet: 35.221.200.134/24
• Abuse Density: 0% (Clean)
• Threat Siblings: 0
• Active Siblings: 0

## Historical Observations (24 Total)

• Recent signal type 2349 (2026-08-13): Operator score 0.3478 (Basic)
• Signal type 13 (2026-08-06): Subnet classification "clean"
• Signal type 18 (2026-08-06): One observation showed New York geolocation via Comcast infrastructure (likely BGP routing artifact)
• No persistent malicious activity detected

## Threat Indicators

• Known Campaigns: None
• Is Tor Exit Node: False
• Is Known Attacker: False
• Is Spam Source: False
• Campaign Likelihood: None

## Recommended Actions

No automatic firewall rules recommended. The IP's risk profile is consistent with legitimate Google Cloud infrastructure. Monitoring recommendation:

• Allow traffic from this IP unless specific threat intelligence correlates
• Monitor for port scanning activity on SSH (22)
• Consider context-specific blocking if destination is internal-facing only

## Assessment

This IP represents standard Google Cloud Platform infrastructure with no malicious indicators. The single SSH port is expected for cloud host management. No defensive blocking recommended based on current intelligence.

---

*Briefing generated: 2026-08-13*

*Data Sources: IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.