35.203.210.83📋 Copy

# IP INTELLIGENCE BRIEFING

Target: 35.203.210.83/32

Classification: LOW RISK - Legitimate Cloud Infrastructure

Date: 2026-06-21

Prepared by: IPDebrief Intelligence Team

---

## EXECUTIVE SUMMARY

IP 35.203.210.83 is a Google Cloud Compute infrastructure address associated with legitimate cloud operations. The IP maintains a low risk profile (score: 25/100) with no active threat indicators, blacklist listings, or campaign associations. This address represents normal cloud hosting infrastructure located in London, England.

---

## OWNERSHIP & INFRASTRUCTURE PROFILE

The IP resolves to Google's cloud DNS hostname (83.210.203.35.bc.googleusercontent.com) with forward resolution confirmed. Email authentication (SPF, DMARC) is properly configured on the associated domain.

---

## THREAT ASSESSMENT

Current Risk Score: 25/100 (Low Risk)

Threat Indicators:

• Blacklist Count: 0
• Known Attacker: False
• Spam Source: False
• Tor Exit Node: False
• Known Campaigns: None
• Abuse Confidence Score: N/A

Control Plane Analysis:

• Route Status: Stable (no route changes in 30 days)
• DNSSEC: Valid
• RPKI State: Consistent
• DNSBL Listed: 1 of 8 lists (minor listing, likely false positive)

---

## NETWORK CONTEXT & NEIGHBORHOOD ANALYSIS

Subnet: 35.203.210.0/24

Total Siblings: 43

Active Siblings: 29

Abuse Density: 0.4651 (moderate for cloud infrastructure)

Risk Distribution in Subnet:

• High Risk: 0
• Medium Risk: 6
• Low Risk: 37

Most neighboring IPs maintain authority scores of 90, indicating legitimate cloud infrastructure. Elevated risk scores (40-65) are consistent with Google Cloud's hosting model and do not indicate malicious activity.

---

## OBSERVATION HISTORY

Total Observations: 22 signals tracked

Key Historical Trends:

• Consistent Google Cloud infrastructure classification maintained
• No ownership changes detected
• Single threat observation recorded (non-persistent)
• No persistent malicious activity confirmed
• Geographic consistency: London, GB maintained throughout observation period

---

## RELATIONSHIP GRAPH

Primary Associations:

• 28 relationship entries identified
• Strong network affiliation with GOOGLE-CLOUD
• DNS associations to bc.googleusercontent.com hostnames
• No anomalous external entity relationships

---

## RECOMMENDED ACTIONS

SOC Analyst Guidance:

1. Allow Traffic: This IP represents legitimate Google Cloud infrastructure. No blocking recommended based on current intelligence.

2. Monitor Context: Implement monitoring if receiving suspicious traffic from this IP despite its low-risk profile.

3. Subnet Awareness: The /24 subnet shows moderate abuse density typical of cloud environments. Evaluate traffic patterns rather than blocking entire subnet.

4. Baseline Behavior: Document normal traffic patterns from Google Cloud IPs for future anomaly detection.

---

## INTELLIGENCE CONFIDENCE

Confidence Level: HIGH

Data Sources: 22 historical signals, 28 relationship mappings, 43 neighbor IP analysis, comprehensive profile scan

Last Updated: 2026-06-21

---

END OF BRIEFING

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.