# IP Intelligence Briefing: 35.239.218.2/32
## Executive Summary
IP address 35.239.218.2 is identified as Google Cloud infrastructure (GOOGLE-CLOUD) with an overall risk score of 25, classified as Low Risk. The IP resolves to a Google Cloud compute instance in Council Bluffs, Iowa, with no active threat indicators or malicious neighbor activity. The subnet (35.239.218.0/24) demonstrates zero abuse density.
## Ownership and Infrastructure
| Attribute | Value |
|---|---|
| **Organization** | Google LLC |
| **Network Name** | GOOGLE-CLOUD |
| **ASN** | 396982 |
| **CIDR Block** | 35.208.0.0/12 |
| **RIR** | ARIN |
| **Infrastructure Type** | CloudCompute |
| **Classification** | Cloud Hosting |
## Geolocation
- Country: United States (US)
- Region: Iowa (IA)
- City: Council Bluffs
- Coordinates: 41.26°N, -95.85°W
- Timezone: America/Chicago
- DNS Resolution: Forward confirmed (2.218.239.35.bc.googleusercontent.com)
## Threat Assessment
| Indicator | Status |
|---|---|
| **Risk Score** | 25/100 (Low Risk) |
| **Abuse Confidence** | Not Available |
| **Blacklist Count** | 0 |
| **Known Campaigns** | None |
| **Tor Exit Node** | No |
| **Known Attacker** | No |
| **Spam Source** | No |
Note: Control plane data indicates 1 DNSBL listing among 8 total lists, though no active threat indicators are currently present.
## Network Activity
- Open Ports: None detected
- TLS Certificate: Not configured
- HTTP Services: Not detected
- Infrastructure Role: Firewalled / No Services
## Observation History
A total of 14 observations were recorded as of the most recent scan (2026-07-30). Key signal types observed:
1. Infrastructure Classification: Confirmed as Google Cloud compute infrastructure (confidence 0.90)
2. DNS Records: Validated googleusercontent.com domain with DNSSEC enabled (confidence 0.90)
3. Geolocation: Council Bluffs, Iowa confirmed via multiple sources (confidence 0.70-0.85)
4. DNSBL Listings: 1 active listing with high severity among 8 total lists
No persistent malicious activity or threat persistence days observed.
## Relationships
| Relationship Type | Target |
|---|---|
| Same Network | GOOGLE-CLOUD |
| DNS Association | 2.218.239.35.bc.googleusercontent.com |
| Same Network | GOOGLE-CLOUD |
## Neighborhood Analysis
| Metric | Value |
|---|---|
| **Subnet** | 35.239.218.0/24 |
| **Abuse Density** | 0 |
| **Neighbor Count** | 0 |
| **Active Siblings** | 0 |
| **Threat Siblings** | 0 |
| **Classification** | Clean |
## Security Actions
No specific firewall rules or blocking recommendations are required at this time. The IP is identified as legitimate cloud infrastructure with low risk.
## Intelligence Assessment
The IP address 35.239.218.2 represents Google Cloud infrastructure used for cloud hosting services. The combination of:
- Low risk score (25/100)
- Clean neighborhood (0 abuse density)
- No active threat indicators
- Validated DNSSEC and corporate DNS resolution
...indicates this is legitimate infrastructure. The single DNSBL listing warrants periodic monitoring but does not indicate current malicious activity. No blocking or mitigation actions are recommended at this time.
---
*Intelligence generated from IPDebrief platform data. Last updated: 2026-07-30*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGLE-CLOUD |
| CIDR Block | 35.208.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 2.218.239.35.bc.googleusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 2.218.239.35.bc.googleusercontent.com |
π DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 30% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 22% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-07-28 04:03:09 UTC |
| Last Seen | 2026-08-12 22:16:29 UTC |
| Profile Built | 2026-08-12 22:17:54 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 23 |
Full dossier details are available via our API.