35.203.211.50📋 Copy

# IP INTELLIGENCE BRIEFING

Target: 35.203.211.50/32

Classification: Low Risk / Cloud Infrastructure

Generated: 2026-06-25

---

## EXECUTIVE SUMMARY

IP 35.203.211.50 is identified as Google Cloud infrastructure located in London, England. Risk assessment indicates low threat activity with no active malicious indicators. The IP operates in a mixed-use subnet with moderate abuse density but exhibits legitimate cloud provider behavior patterns.

---

## OWNERSHIP & GEOLOCATION

• Organization: Google LLC (ASN: 396982)
• Network: 35.203.211.0/24
• Location: London, England, GB
• Coordinates: 51.51°N, -0.13°W
• Classification: CloudCompute / Hosting Provider
• Registration: ARIN RIR

---

## RISK ASSESSMENT

Risk Breakdown:

• Provider Score: 0 (Legitimate infrastructure)
• Authority Score: 0
• Stability Score: 0
• Threat Persistence Days: 0

---

## NETWORK BEHAVIOR

• Infrastructure Type: Cloud Compute (Google Cloud)
• DNS Resolution: 50.211.203.35.bc.googleusercontent.com
• PTR Hostname: googleusercontent.com
• Open Ports: None detected (Firewalled)
• Services: No active services exposed
• TLS Certificate: Not detected
• Reverse DNS: Forward confirmed

---

## THREAT INDICATORS

• Active Threat Indicators: None
• Threat Feeds: None
• Campaign Correlations: None
• Certificate Matches: 0
• Banner Matches: 0
• Correlated IPs: 0

Status: No active malicious behavior detected. IP is operating within expected Google Cloud service parameters.

---

## NEIGHBORHOOD ANALYSIS

Subnet: 35.203.211.50/24

• Total Siblings: 47
• Active Siblings: 35
• Threat Siblings: 21
• Abuse Density: 0.4468 (Moderate)
• Subnet Classification: Mixed

Risk Distribution:

• High Risk: 0
• Medium Risk: 22
• Low Risk: 24

Notable Neighbors:

• 35.203.211.184 (Risk: 50, Authority: 90)
• Multiple IPs with Risk: 25-40, Authority: 90

Assessment: Subnet exhibits mixed usage patterns typical of cloud infrastructure hosting. Neighbor risk profiles remain within expected ranges for Google Cloud environments.

---

## OBSERVATION HISTORY

Total Observations: 20

Recent Signals:

• 2026-06-25 16:28: Subnet abuse density 0.4468, mixed classification
• 2026-06-25 16:26: Confirmed Google Cloud provider infrastructure
• 2026-06-25 16:22: Listed on 8 threat intelligence feeds (1 high severity listing)
• 2026-06-25 16:22: Geographic location: London, ENG, GB
• 2026-06-25 16:19: Operator score 0 (minimal threat)

Temporal Trends:

• Ownership changes: 0
• Threat persistence days: 0
• Persistently malicious: False
• Route stability: Unstable (0 route changes in 30d)

---

## RELATIONSHIP MAPPING

Identified Relationships: 53

Primary Associations:

• Network: GOOGLE-CLOUD (Same Network)
• DNS: 50.211.203.35.bc.googleusercontent.com (DNS Association)
• Multiple DNS hostname associations

Network Role: Cloud provider infrastructure with firewalled/no services exposure pattern.

---

## RECOMMENDED ACTIONS

Firewall/Security Recommendations:

• No blocking required — IP identified as legitimate Google Cloud infrastructure
• Monitoring recommended — Track for any behavior pattern changes
• No immediate threat mitigation needed

Classification: ALLOW / MONITOR

Rationale: IP 35.203.211.50 exhibits standard Google Cloud provider behavior with no active threat indicators. The subnet's mixed classification and moderate abuse density are consistent with legitimate cloud hosting environments. No firewall rules or blocking actions are recommended.

---

End of Briefing

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.