35.203.25.90📋 Copy

IP INTELLIGENCE BRIEFING

Target: 35.203.25.90/32

Classification: Low Risk

Assessment Date: Current

---

OWNERSHIP & GEOLOCATION

• Organization: Google LLC (Google Cloud)
• ASN: 396982
• CIDR Block: 35.192.0.0/12
• Location: Montreal, Quebec, Canada
• Infrastructure Type: Cloud-hosted service

NETWORK PROFILE

• Reputation Score: 25 (Low Risk)
• Abuse Confidence: None detected
• Blacklist Status: Not listed
• Known Attacker: No
• Tor Exit Node: No
• Proxy/VPN: No
• CDN: No

SERVICE SIGNATURE

• Open Ports: TCP/22 (SSH) - OpenSSH 9.6p1 Ubuntu-3ubuntu13.18
• DNS Resolution: 90.25.203.35.bc.googleusercontent.com
• PTR Record: 90.25.203.35.bc.googleusercontent.com
• Forward Resolution: Confirmed

THREAT INDICATORS

• No malicious indicators found
• No known campaigns associated
• No correlated threat IPs detected
• No email reputation issues
• DNSBL listing count: 1 (minimal)

NEIGHBORHOOD ANALYSIS

• Subnet: 35.203.25.90/24
• Abuse Density: 0%
• Subnet Classification: Clean
• Threat Siblings: 0
• No neighboring IPs flagged for abuse

HISTORICAL TRENDS

• 23 observations recorded over monitoring period
• Consistent clean classification maintained
• No risk escalation detected
• Minor geographic validation anomaly noted (RTT 26ms < theoretical minimum 112ms for 5,598km distance)

RELATIONSHIP MAPPING

• DNS associations: googleusercontent.com
• Network associations: GOOGLE-CLOUD
• No anomalous external relationships

---

RECOMMENDATIONS

SOC ANALYST ACTION:

1. No immediate blocking required - IP shows legitimate Google Cloud infrastructure characteristics

2. Monitor SSH traffic - Standard cloud port, but verify traffic patterns align with expected Google Cloud behavior

3. Continue passive monitoring - Historical data indicates stable, low-risk profile

FIREWALL RULES:

• No specific firewall rules recommended at this time
• Standard Google Cloud egress/ingress policies apply

FINAL ASSESSMENT: This IP address is associated with legitimate Google Cloud infrastructure in Montreal, Canada. No malicious activity or threat indicators observed. The low risk score (25) and clean neighborhood classification support continued passive monitoring without active blocking.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.