# IP Intelligence Briefing: 35.203.210.159
## Executive Summary
IP 35.203.210.159 is a Google Cloud infrastructure address located in London, GB with a moderate risk rating (40/100). No active threat indicators or persistent malicious behavior were observed. The IP operates within a low-abuse-density subnet with predominantly low-risk neighbors.
## Infrastructure Profile
- Organization: Google LLC (ASN 396982)
- Network Block: 35.192.0.0/12 (GOOGLE-CLOUD)
- Infrastructure Type: CloudCompute, Hosting
- Geolocation: London, England, GB (51.51°N, -0.13°W)
- DNS Resolution: 159.210.203.35.bc.googleusercontent.com
- Status: Firewalled/No services exposed
## Risk Assessment
| Metric | Value |
|---|---|
| Risk Score | 40 (Moderate Risk) |
| Abuse Confidence | None detected |
| Blacklist Count | 0 |
| Threat Indicators | None |
| DNSBL Listed | 2 of 8 lists |
## Behavioral Analysis
Observation history (19 total signals) shows:
- Geolocation consistent with London, GB across multiple probes
- Port scanning detected with no open services exposed
- Operator classification: Basic (0.3478 score)
- No persistent malicious activity detected
- Route stability: False (route changes observed within 30-day window)
## Neighborhood Context
Subnet 35.203.210.0/24 contains 68 sibling IPs:
- Abuse Density: 0
- Risk Distribution: 0 high-risk, 4 medium-risk, 63 low-risk
- Notable neighbors include 35.203.210.4, .6, .11, .12, .15 (all risk score 25, authority score 90)
## Relationships
- 7 relationship entities identified
- DNS associations: 159.210.203.35.bc.googleusercontent.com
- Network associations: GOOGLE-CLOUD
## Recommendations
No immediate blocking recommended. The IP represents legitimate Google Cloud infrastructure with no active threat indicators. Monitor for changes in service exposure or geolocation inconsistencies.
---
*Report generated: 2026-08-13*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGLE-CLOUD |
| CIDR Block | 35.192.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | 159.210.203.35.bc.googleusercontent.com |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | 159.210.203.35.bc.googleusercontent.com |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 50% | 2 | 3 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 25% | 6 | 7 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-08-10 23:37:07 UTC |
| Last Seen | 2026-08-30 18:07:45 UTC |
| Profile Built | 2026-08-30 18:13:12 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 27 |
Full dossier details are available via our API.