35.203.211.6📋 Copy

INTELLIGENCE BRIEFING: IP 35.203.211.6

Subject: Google Cloud Infrastructure Asset in London, GB

Classification: Low Risk (Risk Score: 25)

Ownership and Infrastructure:

The IP address 35.203.211.6 belongs to Google LLC (ASN 396982) and is classified as Google Cloud infrastructure. The address resolves to hostname 6.211.203.35.bc.googleusercontent.com and is associated with the bgp prefix 35.203.211.0/24. Geolocation data consistently identifies the IP as located in London, England, with coordinates 51.51, -0.13.

Risk Assessment:

The IP maintains a Low Risk reputation with a risk score of 25. No threat indicators were identified: the IP is not a known attacker, not a spam source, not a Tor exit node, and maintains zero blacklist entries. The IP is classified as a cloud compute instance with hosting capabilities and is firewalled with no open ports detected during service scans.

Temporal Analysis:

Observation history shows 21 signals recorded, with the most recent activity on 2026-06-15. Signals indicate port scanning activity, subnet abuse density classification, and consistent geolocation validation. Network latency measurements averaged 91.4ms with a minimum possible RTT of 9.42ms. No persistent malicious behavior was observed; threat persistence days equal 0.

Subnet Neighborhood Analysis:

The /24 subnet 35.203.211.0/24 contains 45 sibling IPs with mixed classification and 0.5 abuse density. Risk distribution within the subnet shows 0 high-risk, 28 medium-risk, and 17 low-risk addresses. Multiple neighboring IPs (35.203.211.4, 35.203.211.5, 35.203.211.13, 35.203.211.14, 35.203.211.17) carry risk scores of 25-40 with authority scores of 90, indicating legitimate cloud infrastructure usage.

Network Role:

The IP operates as a cloud compute host with service purpose defined as "Firewalled / No Services." No TLS certificates, HTTP titles, or server banners were detected. DNS validation confirmed with SPF and DMARC records in place for the associated domain.

Control Plane Data:

The IP shows one DNSBL listing across 8 total lists with an operator score of 0.3478. BGP route stability is false with zero route changes in the past 30 days. RPKI state and IRR consistency data were not available in the control plane assessment.

Recommendations:

No security actions or firewall rules were recommended by the system. The IP presents as legitimate Google Cloud infrastructure with no active threat indicators. SOC analysts should continue monitoring for any changes in risk score or emergence of threat indicators.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.