35.245.101.140📋 Copy

# IP INTELLIGENCE BRIEFING: 35.245.101.140/32

## EXECUTIVE SUMMARY

IP 35.245.101.140 is a Google Cloud infrastructure endpoint (GOOGLE-CLOUD network, ASN 396982) classified as Moderate Risk. The IP shows no active threat indicators, but exhibits geographic validation anomalies consistent with anycast/CDN distribution. No immediate blocking required; monitor for behavioral changes.

## OWNERSHIP & INFRASTRUCTURE

• Organization: Google LLC (GOOGLE-CLOUD)
• ASN: 396982
• CIDR Block: 35.208.0.0/12
• Infrastructure Type: CloudCompute, Hosting-enabled
• Network Role: Provider/Cloud Infrastructure

## GEOGRAPHIC ANALYSIS

• Reported Location: Washington, District of Columbia, US
• Geographic Validation: FAILED — RTT of 25ms reported for 6,296km distance violates physics (minimum possible RTT: 125.9ms). This indicates anycast routing or CDN infrastructure.
• Geographic Sources: 2 sources, consensus: true

## THREAT INDICATORS

• Risk Score: 50/100 (Moderate Risk)
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Status: 0 blacklists; 2 DNSBL listings across 8 total lists (likely false positives for cloud infrastructure)
• Abuse Confidence Score: Not available

## NETWORK SERVICES

• Open Ports: None detected
• HTTP/TLS Services: No open web services
• DNS PTR: 140.101.245.35.bc.googleusercontent.com
• Forward Resolution: Confirmed (googleusercontent.com)

## TEMPORAL ANALYSIS (OBSERVATION HISTORY)

• Total Observations: 19 signals
• Recent Activity: 2026-08-13 (last observations)
• Threat Persistence: 0 days
• Ownership Changes: 0
• Neighborhood Classification: Clean (0 abuse density, 0 threat siblings in /24)
• Route Stability: Unstable (not route stable)

## RELATIONSHIP GRAPH

• DNS Associations: 140.101.245.35.bc.googleusercontent.com
• Network Associations: GOOGLE-CLOUD (same network)
• Related Entities: Limited to Google Cloud infrastructure

## RECOMMENDATIONS

1. BLOCK: No immediate action required

2. MONITOR: Observe for any behavioral changes or new threat indicators

3. ALLOW: Traffic from Google Cloud IPs is generally legitimate; allow with standard cloud provider policies

4. DOCUMENT: Note geographic validation anomaly as infrastructure characteristic, not compromise indicator

## SOC ACTION NOTES

This IP is part of Google's anycast CDN infrastructure. The geographic inconsistency is expected behavior for globally distributed cloud services. No evidence of malicious activity. Standard cloud provider traffic policies apply.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.