# IP Intelligence Briefing: 35.238.170.100
Classification: LOW RISK | Report Date: 2026-08-13
---
## Executive Summary
IP address 35.238.170.100 is a low-risk address (Risk Score: 25) associated with Google Cloud infrastructure. The IP shows no active threat indicators, no open services, and exhibits stable operational characteristics consistent with legitimate cloud service usage. No immediate defensive action required.
---
## Technical Profile
| Attribute | Value |
|---|---|
| **Risk Score** | 25 / 100 |
| **Reputation** | Low Risk |
| **Organization** | Google LLC (AS396982) |
| **Infrastructure** | Google Cloud Platform |
| **Geolocation** | Council Bluffs, IA, US |
| **CIDR Block** | 35.238.160.0/20 |
| **BGP Prefix** | 35.238.160.0/20 |
| **DNS Resolution** | 100.170.238.35.bc.googleusercontent.com |
| **DNSSEC** | Valid |
---
## Threat Indicators
- Threat Assessment: None detected
- Blacklist Status: 1 DNSBL listing out of 8 total lists evaluated
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- Campaign Correlation: None identified
---
## Network Behavior
- Service Status: No open ports or active services detected (Firewalled / No Services)
- TLS Certificates: None observed
- HTTP Banner: None detected
- Infrastructure Type: Cloud-hosted backend infrastructure
- Connection Type: Backend services only
---
## Historical Analysis
Analysis of 15 observation signals indicates stable operational patterns:
- Ownership consistently attributed to Google LLC
- Operator score maintained at "Basic" level (0.3478)
- No ownership changes recorded
- No persistent malicious behavior observed
- Threat observation count: 0
---
## Neighborhood Assessment
Subnet 35.238.170.0/24 analysis:
- Abuse Density: 0 (Minimal)
- Neighbor Count: 1 sibling IP identified
- Neighbor Risk: 35.238.170.6 (Risk Score: 25, Authority Score: 90)
- Classification: Low Risk subnet
---
## Recommended Actions
Current Status: No active threats require defensive measures.
Monitoring Recommendations:
- Continue standard monitoring for Google Cloud infrastructure
- No immediate firewall rules required
- No IP blocking recommended
- Consider whitelisting if this is legitimate business traffic
---
Analyst Notes: This IP represents typical Google Cloud infrastructure behavior with no anomalous activity. The single DNSBL listing appears to be routine rather than indicative of malicious activity. Correlate with organizational traffic policies before any defensive actions.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGLE-CLOUD |
| CIDR Block | 35.208.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 100.170.238.35.bc.googleusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 100.170.238.35.bc.googleusercontent.com |
π DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 22% | 10 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-08-09 16:59:43 UTC |
| Last Seen | 2026-08-30 18:55:02 UTC |
| Profile Built | 2026-08-30 19:06:55 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 31 |
Full dossier details are available via our API.