# IP Intelligence Briefing: 35.229.54.218/32
Classification: Legitimate Cloud Infrastructure
Date: 2026-08-05
Analyst: IPDebrief Intelligence Division
---
## Executive Summary
IP address 35.229.54.218 is a Google Cloud Platform infrastructure endpoint with a risk score of 0. The IP is part of the GOOGLE-CLOUD network (35.208.0.0/12, ASN 396982) and shows no malicious indicators, threat activity, or suspicious behavior. The address is classified as "clean" with zero abuse density in its /24 neighborhood.
---
## Technical Profile
Ownership & Registration:
- Organization: Google LLC
- Network Name: GOOGLE-CLOUD
- ASN: 396982
- CIDR Block: 35.208.0.0/12
- RIR: ARIN
- Abuse Contact: Available via RDAP
Geolocation:
- Country: United States (US)
- Region: South Carolina
- City: Moncks Corner
- Coordinates: 33.21, -80.17
- Timezone: America/New_York
DNS Resolution:
- PTR Hostname: 218.54.229.35.bc.googleusercontent.com
- Forward Resolution: Confirmed
- Hosted Domain: googleusercontent.com
- Email Authentication: SPF and DMARC records present
---
## Threat Assessment
Risk Indicators:
- Risk Score: 0 (Low Risk)
- Abuse Confidence Score: None
- Blacklist Count: 0
- Known Campaigns: None
- Threat Feeds: None
Network Classification:
- Infrastructure Type: Google Cloud
- Connection Type: Firewalled / No Services
- Open Ports: None detected
- TLS Certificate: None
- HTTP Banner: None
Control Plane:
- BGP Prefix: 35.229.48.0/20
- Route Stability: False
- DNSSEC Valid: Yes
- DNSBL Listed Count: 0
- RPKI State: Not assessed
---
## Observation History
Signal Timeline (21 total observations):
- Most Recent: 2026-08-05T22:07:43 UTC
- Previous: 2026-07-30T14:47:11 UTC
- Signal Types: DNS, routing, services, ownership, reputation, geolocation
- All observations: Low confidence scores (0.27-0.60), no threat-related signals detected
Temporal Analysis:
- Ownership Changes: 0
- Threat Persistence Days: 0
- Threat Observation Count: 0
- Persistently Malicious: No
---
## Network Relationships
Connected Entities (10 relationships):
- Primary: GOOGLE-CLOUD network associations (6 instances)
- DNS Associations: 218.54.229.35.bc.googleusercontent.com (4 instances)
- No external organization or certificate relationships detected
Campaign Correlation:
- Campaign Likelihood: None
- Certificate Matches: 0
- Correlated IPs: 0
---
## Neighborhood Analysis
Subnet: 35.229.54.218/24
- Total Siblings: 1
- Active Siblings: 1
- Threat Siblings: 0
- Abuse Density: 0.0
- Classification: Clean
- Inherited Risk: 0
---
## Recommended Actions
For SOC Analysts:
1. Allow Traffic: No blocking required; this is legitimate Google Cloud infrastructure
2. Monitoring: Standard monitoring applies; no special alerting needed
3. Firewall Rules: No restrictive rules recommended for this IP
4. Email Authentication: SPF and DMARC records present for googleusercontent.com
Firewall Considerations:
- No iptables/nftables rules recommended
- No Cloudflare/AWS WAF rules required
- This IP is a trusted cloud provider endpoint
---
## Conclusion
IP 35.229.54.218 represents standard Google Cloud infrastructure with no security concerns. The IP exhibits normal behavior for cloud services with proper DNS configuration, no open services, and zero threat indicators. No defensive action is required beyond standard operational procedures.
Status: CLEAR - No action required
Risk Level: LOW
Confidence: HIGH
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGLE-CLOUD |
| CIDR Block | 35.208.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 218.54.229.35.bc.googleusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 218.54.229.35.bc.googleusercontent.com |
π DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | 1/4 domains |
| DMARC | 1/4 domains |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
| Domains Checked | 4 domains |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | β |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | kuberneteskubernetes.defaultkubernetes.default.svckubernetes.default.svc.cluster.local |
| Valid From | 2026-08-12T02:47:34+00:00 |
| Valid Until | 2031-08-11T02:49:34+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 1825 days |
| Serial Number | 00A8D2327473CDB7D356D3C24A53EEB0E5 |
| Thumbprint | 361F58DBB65E6A6F30BB2C53AAE662BD30A88819 |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 15% | 1 | 2 |
| geolocation | 33% | 2 | 4 |
| Overall | 22% | 10 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-07-27 21:54:32 UTC |
| Last Seen | 2026-08-12 22:01:14 UTC |
| Profile Built | 2026-08-12 22:13:25 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 26 |
Full dossier details are available via our API.