35.239.239.105📋 Copy

# IP Intelligence Briefing: 35.239.239.105

Classification: Google Cloud Infrastructure (Low Risk)

Report Date: Current

Analyst: IPDebrief Intelligence

---

## Executive Summary

IP address 35.239.239.105 is identified as legitimate Google Cloud infrastructure with a low-risk profile (risk score: 25). No malicious indicators, campaigns, or threat associations were detected. The IP belongs to Google LLC (ASN 396982) and operates within the US infrastructure footprint.

---

## Profile Assessment

Risk Classification: Low Risk

• Risk Score: 25
• Provider Score: 0
• Authority Score: 0
• Stability Score: 0

Ownership & Infrastructure:

• Organization: Google LLC
• ASN: 396982
• Infrastructure Type: CloudCompute
• Network Role: Cloud Provider / Hosting
• Geolocation: Council Bluffs, IA, US

Network Services:

• Open Ports: None detected
• Service Purpose: Firewalled / No Services
• DNS Resolution: 105.239.239.35.bc.googleusercontent.com
• Reverse DNS: 105.239.239.35.bc.googleusercontent.com
• Forward Resolution: Confirmed

Email Security:

• SPF: Valid (include:_spf.google.com ?all)
• DMARC: Valid (p=none; rua=mailto:mailauth-reports@google.com)
• TXT Records: 1

---

## Threat Intelligence

Threat Indicators:

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0
• Known Campaigns: None
• Threat Feeds: Empty

Control Plane:

• BGP Prefix: 35.239.224.0/20
• Route Stability: Unstable
• RPKI State: Not evaluated
• DNSBL Listed: 1 of 8 total lists
• Operator Score: 0.3478 (Basic)

---

## Observation History

Total Observations: 24 signals over monitoring period

Recent Activity:

• 2026-06-27: SPF/DMARC validation for googleusercontent.com domain (confidence: 0.85)
• 2026-06-19: Port scanning activity detected
• 2026-06-19: Subnet classification updated to "mostly_clean" (inherited risk: 5)
• 2026-06-19: Geolocation validation attempted (ICMP blocked)

Temporal Analysis:

• Ownership Changes: 0
• Threat Persistence Days: 0
• Persistently Malicious: No
• Threat Observation Count: 1

---

## Relationship Graph

Total Relationships: 56

Key Connections:

• Same Network: Multiple associations to GOOGLE-CLOUD
• DNS Association: 105.239.239.35.bc.googleusercontent.com
• Network Type: GOOGLE-CLOUD (repeated across multiple relationship entries)

All relationships indicate legitimate Google Cloud infrastructure associations. No malicious peer connections identified.

---

## Neighborhood Analysis

Subnet: 35.239.239.105/24

Abuse Density: 0 (mostly clean)

Risk Distribution:

• High Risk: 0
• Medium Risk: 0
• Low Risk: 1

Active Siblings: 2

Neighbor Profile:

• IP: 35.239.239.228
• Risk Score: 25
• Authority Score: 90

The /24 subnet demonstrates low abuse density with consistent low-risk profiles across active siblings.

---

## Recommended Actions

Firewall/Security Rules:

• No blocking required for this IP address
• Monitor for behavioral changes if legitimate use is not expected
• Standard Google Cloud IP allow-listing may apply based on organizational policy

SOC Analyst Guidance:

• Treat as legitimate infrastructure
• No immediate threat action required
• Verify expected traffic patterns if this IP appears in monitoring

---

Status: ACTIVE INFRASTRUCTURE

Last Updated: Current analysis cycle

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.