35.223.212.217📋 Copy

# IP INTELLIGENCE BRIEFING

Target: 35.223.212.217/32

Classification: Moderate Risk Cloud Infrastructure

Report Date: 2026-08-13

---

## EXECUTIVE SUMMARY

The target IP 35.223.212.217 is a Google Cloud infrastructure address (ASN 396982, GOOGLE-CLOUD) with a moderate risk score of 40. The IP is located in New York, US, and is associated with the googleusercontent.com domain. No direct threat indicators or active abuse campaigns were identified. The IP shows cloud hosting characteristics with firewalled/no-services status.

---

## TECHNICAL PROFILE

Ownership & Infrastructure:

• Organization: Google LLC
• ASN: 396982 (GOOGLE-CLOUD-PLATFORM)
• CIDR Block: 35.208.0.0/12
• Registration: ARIN (2017-09-29)
• Infrastructure Type: CloudCompute
• Network Role: Provider (Google Cloud)

Geolocation:

• Country: US
• Region: New York (US-NY)
• City: New York
• Timezone: America/New_York

DNS Resolution:

• PTR Hostname: 217.212.223.35.bc.googleusercontent.com
• Forward Resolution: Confirmed (googleusercontent.com)
• DNSSEC: Valid
• Email Auth: SPF enabled, DMARC configured (p=none)

---

## THREAT INDICATORS

Control Plane:

• DNSBL Listed: 2 of 8 total lists
• Route Stability: Unstable (false)
• BGP Prefix: 35.223.208.0/20

---

## OBSERVATION HISTORY

Fifteen total observations recorded through 2026-08-13. Key signals include:

• DNSSEC validation confirmed across observations
• SPF record: `v=spf1 include:_spf.google.com ?all`
• DMARC record: `v=DMARC1; p=none`
• ASN and geolocation signals consistent with Google Cloud Platform
• No ownership or threat persistence changes observed

---

## RELATIONSHIPS & NEIGHBORHOOD

Entity Relationships:

• Same Network: GOOGLE-CLOUD
• DNS Association: 217.212.223.35.bc.googleusercontent.com

/24 Neighborhood (35.223.212.0/24):

• Neighbor Count: 0
• Abuse Density: 0
• High/Medium/Low Risk: 0/0/0
• No active threat siblings identified

---

## RECOMMENDED ACTIONS

Firewall Rule Recommendations:

Note: Recommendations are probabilistic and should be combined with other telemetry before implementing blocking rules. The IP is on cloud infrastructure with legitimate email authentication configured.

---

## ANALYST NOTES

This IP belongs to Google Cloud Platform infrastructure. The moderate risk score of 40 is influenced by DNSBL listings (2 of 8 lists) but no confirmed malicious activity was observed. The IP lacks open ports and services, consistent with firewalled cloud infrastructure. No evidence of abuse campaigns, spam generation, or attacker activity. SOC teams should evaluate contextual traffic patterns before implementing blocking actions, as this is legitimate cloud infrastructure.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.