35.228.80.223📋 Copy

# IP Intelligence Briefing: 35.228.80.223/32

## Executive Summary

IP address 35.228.80.223 is a low-risk infrastructure endpoint hosted on Google Cloud Platform (GCP) infrastructure in Hamina, Finland. Analysis reveals no active threat indicators, blacklist presence, or malicious activity. The IP operates within a clean subnet environment with minimal abuse density. No immediate defensive actions recommended.

---

## Infrastructure Profile

## Network Characteristics

• CIDR Block: 35.228.80.0/20 (control plane origin)
• DNS Resolution: 223.80.228.35.bc.googleusercontent.com (forward confirmed)
• Email Security: SPF and DMARC configured (googleusercontent.com domain)
• Open Services: SSH (port 22/TCP) with OpenSSH_10.0 banner
• TLS/HTTP: No TLS certificate detected; HTTP services inactive

## Threat Assessment

Active Threat Indicators: None detected

• Blacklist Count: 0
• Abuse Confidence Score: N/A (insufficient signal)
• Known Campaigns: None
• Threat Feeds: Empty
• Pulsedive Risk: N/A

Campaign Indicators:

• Campaign Likelihood: N/A
• CERT Matches: 0
• Correlated IPs: 0

## Observation History

Analysis of 20 recent observations (August 2026 timeframe) indicates:

• Temporal Stability: No ownership changes; threat persistence: 0 days
• Geo Validation: ICMP blocked; geolocation plausible (1614.2 km distance variance)
• Control Plane: Operator score 0.3478 (Basic); DNSSEC valid; CAA records present
• Signal Consistency: Moderate variation in operator scoring (0.4–0.5 confidence range)
• Threat Persistence: Not persistently malicious

## Relationship Graph

DNS Associations: Multiple DNS records pointing to 223.80.228.35.bc.googleusercontent.com

Network Relationships: Same-network associations with GOOGLE-CLOUD infrastructure

Total Relationships: 14 entries (primarily DNS and network-based)

## Neighborhood Analysis (35.228.80.0/24)

• Abuse Density: 0 (Clean subnet classification)
• Total Siblings: 2 IPs
• Active Siblings: 0
• Threat Siblings: 0
• Risk Distribution: 1 low-risk IP

Notable Neighbor:

• 35.228.80.29: Risk Score 25, Authority Score 90 (requires separate investigation)

## Recommended Actions

Current Risk Level: Low

• No firewall rules recommended
• No blocking actions warranted at this time
• Monitor for behavioral changes given limited observation history

Monitoring Priority: Low

• Subnet-level monitoring recommended due to one elevated-risk neighbor (35.228.80.29)
• Standard Google Cloud infrastructure monitoring protocols apply

---

## Intelligence Conclusion

IP 35.228.80.223 represents benign Google Cloud infrastructure with no evidence of malicious activity. The endpoint operates within a clean network environment. SOC analysts may treat this IP as legitimate cloud infrastructure. Continue routine monitoring; no escalation or blocking required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.