# Threat Intelligence Briefing: 35.245.78.21/32
## Executive Summary
IP address 35.245.78.21 is associated with Google Cloud infrastructure (AS396982, GOOGLE-CLOUD). Current risk assessment indicates Low Risk (score: 25). No active threat indicators or open services detected. The IP resolves to Google-owned infrastructure with standard DNS and email authentication mechanisms in place.
## Technical Profile
| Attribute | Value |
|---|---|
| **Organization** | Google LLC (AS396982) |
| **Network** | 35.208.0.0/12 |
| **Geolocation** | Ashburn, VA, US |
| **Risk Score** | 25 (Low Risk) |
| **Network Role** | CloudCompute / Infrastructure |
| **Open Ports** | None detected |
| **Service Purpose** | Firewalled / No Services |
## DNS & Network Analysis
- PTR Record: 21.78.245.35.bc.googleusercontent.com
- Forward Resolution: Confirmed to googleusercontent.com
- Email Authentication: SPF and DMARC records present
- DNSBL Status: 1 of 8 blacklist listings recorded historically
## Threat Indicators
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- Active Threats: None
- Campaign Associations: None detected
## Historical Observations (25 signals)
- 2026-08-05: DNSBL listing detected (1 of 8 lists, high severity)
- 2026-08-12: Recent observations show no active threats; geolocation data from alienvault-otx confirms US location with no threat indicators
## Geographic Validation
Traceroute analysis flagged geovalidation inconsistency:
- Claimed location: Washington, DC area
- Traceroute distance: 6295.7 km
- Observed RTT: 27-31ms
- Validated as implausible (minimum possible RTT for distance: 125.9ms)
## Neighborhood Analysis
- Subnet: 35.245.78.0/24
- Neighbor Count: 0
- Abuse Density: 0
- Risk Distribution: None (0 high, 0 medium, 0 low)
- Classification: Clean subnet
## Relationships
- DNS associations link to hostname: 21.78.245.35.bc.googleusercontent.com
- Multiple network associations confirm GOOGLE-CLOUD infrastructure membership
## Recommended Actions
No specific firewall rules or blocking recommendations generated based on current risk profile. The IP is classified as Google Cloud infrastructure with no active threat indicators.
Assessment: This IP address represents legitimate Google Cloud infrastructure. No defensive action required at this time. Monitor for changes in DNSBL status or threat indicators.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGLE-CLOUD |
| CIDR Block | 35.208.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 21.78.245.35.bc.googleusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 21.78.245.35.bc.googleusercontent.com |
π DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 30% | 2 | 3 |
| reputation | 28% | 1 | 3 |
| geolocation | 35% | 2 | 4 |
| Overall | 26% | 10 | 17 |
| Data Coherence | Mostly Consistent (80%) β 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-07-21 12:55:29 UTC |
| Last Seen | 2026-08-12 16:03:03 UTC |
| Profile Built | 2026-08-12 16:17:57 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 26 |
Full dossier details are available via our API.