35.203.211.129📋 Copy

# IP Intelligence Briefing: 35.203.211.129

Classification: LOW RISK / LEGITIMATE INFRASTRUCTURE

Date: August 2026

Analyst: IPDebrief Intelligence Team

## Executive Summary

IP address 35.203.211.129 is identified as legitimate Google Cloud infrastructure with a low risk profile (Risk Score: 25). No malicious indicators, threat feeds, or blacklist entries were detected. The IP operates within Google's cloud network (AS396982) with geolocation data pointing to London, England.

## Technical Profile

## Threat Assessment

• Abuse Confidence Score: N/A
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Active Threats: No
• Campaign Associations: None identified
• Persistence: No persistent malicious activity observed

## Historical Observation Analysis

16 signal observations recorded with consistent geolocation data. Recent observations (August 2026) confirm:

• Stable ownership with zero ownership changes
• No threat persistence indicators
• Operator score: 0.3478 (Basic classification)
• Network classification signals indicate legitimate cloud infrastructure
• RTT measurements: Avg 96.6ms, Min 95ms, Max 98ms (consistent with London-based infrastructure)

## Network Neighborhood Analysis

Subnet: 35.203.211.0/24

• Total Siblings: 71
• Abuse Density: 0%
• Risk Distribution: 67 Low Risk, 4 Medium Risk, 0 High Risk
• Authority Scores: Neighbors show high authority scores (90), indicating legitimate infrastructure

Key neighbor IPs monitored:

• 35.203.211.4 (Risk: 25, Authority: 90)
• 35.203.211.5 (Risk: 40, Authority: 90)
• 35.203.211.6 (Risk: 25, Authority: 90)

## DNS and Service Analysis

• PTR Record: 129.211.203.35.bc.googleusercontent.com
• Forward Resolution: Confirmed (1 hostname)
• Email Authentication: SPF and DMARC configured
• Service Classification: Firewalled / No Services Active
• TLS Certificates: None detected

## Security Recommendations

No immediate action required. The IP address represents legitimate Google Cloud infrastructure with no malicious indicators.

Monitoring Guidance:

• Maintain standard monitoring for Google Cloud IP ranges
• No firewall rules or blocking recommended
• Continue routine network baseline observation
• Subnet-level abuse density is negligible (0%)

## Intelligence Confidence

High confidence in classification based on:

• Consistent geolocation signals (5 probes)
• Established DNS associations with legitimate Google domains
• High authority scores across neighborhood
• Zero threat indicators from multiple sources
• No historical malicious behavior patterns

---

*This intelligence briefing was generated using IPDebrief threat intelligence data. SOC analysts should correlate with additional internal telemetry and threat intelligence sources before taking operational action.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.