35.203.210.205📋 Copy

# INTELLIGENCE BRIEFING: IP Address 35.203.210.205/32

Classification: Moderate Risk

Date: Current Assessment

Analyst: IPDebrief Intelligence Team

---

## EXECUTIVE SUMMARY

IP address 35.203.210.205 operates within Google Cloud infrastructure (GOOGLE-CLOUD, ASN 396982) and demonstrates a moderate risk profile with a risk score of 50. The address is geolocated to City of London, England, and shows no active service exposure. Network context indicates low-abuse-density environment with minimal threat indicators across the /24 subnet.

---

## OWNERSHIP AND INFRASTRUCTURE

The IP address is hosted on Google Cloud infrastructure. Ownership data indicates stable cloud-based assignment with no recent ownership changes.

---

## NETWORK STATUS AND SERVICES

Service Exposure: No open ports detected. The IP is firewalled with no publicly accessible services.

DNS Configuration:

• PTR Hostnames: 205.210.203.35.bc.googleusercontent.com
• Forward Resolution: Confirmed
• Domain: googleusercontent.com
• Email Authentication: SPF and DMARC records present

---

## THREAT INDICATORS

No active threat indicators detected. The IP shows no correlation with known malicious campaigns or threat actor infrastructure.

---

## OBSERVATION HISTORY

Total Observations: 18 signals

Recent Activity (2026-07-31):

• Port scanning detected with no open ports
• DNS resolution confirmed for googleusercontent.com
• Geolocation signals show UK (GB) and US (US) - some inconsistency observed
• Risk assessment stable with no persistent malicious behavior

Temporal Analysis:

• Ownership changes: 0
• Threat persistence days: 0
• Threat observation count: 0
• Persistently malicious: False

---

## NETWORK CONTEXT

Subnet: 35.203.210.0/24

Abuse Density: 0.129 (Low)

Classification: mostly_clean

Siblings Analysis:

• Total siblings: 62
• Active siblings: 57
• Threat siblings: 8
• Risk distribution: 0 high, 5 medium, 56 low

The neighborhood environment demonstrates low abuse density with minimal threat concentration. Eight of sixty-two active sibling IPs show elevated risk scores.

---

## RELATIONSHIP GRAPH

Identified Relationships:

• Same Network: GOOGLE-CLOUD (multiple associations)
• DNS Associations: 205.210.203.35.bc.googleusercontent.com (multiple records)

No external organizational or certificate relationships identified beyond Google Cloud infrastructure.

---

## OPERATIONAL FINDINGS

Control Plane Status:

• BGP Prefix: 35.203.210.0/24
• Route Stability: Stable
• RPKI State: Not Available
• IRR Consistency: Not Available

GeoValidation:

• Distance: 471.1 km
• Minimum RTT: 90 ms
• Average RTT: 93.2 ms
• Probes: 5
• Geo Plausible: True

---

## RECOMMENDATIONS

Threat Intelligence Assessment: The moderate risk score of 50, combined with Google Cloud infrastructure hosting and lack of active threat indicators, suggests this IP is likely legitimate cloud infrastructure. The automated blocking recommendations generated by the risk engine appear conservative.

Monitoring Priority: LOW

Action Considerations:

1. Do not block without additional context - this is Google Cloud infrastructure with no detected malicious activity

2. Monitor for any changes in threat indicators or service exposure

3. Correlate with any observed malicious behavior from this or related IPs

Contextual Notes: The IP is on Google Cloud's 35.192.0.0/12 block, which hosts legitimate services including Google Workspace and other cloud applications. The 2/8 DNSBL listings may relate to reputation scoring mechanisms rather than confirmed malicious activity.

---

End of Briefing

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.