# IP INTELLIGENCE BRIEFING
Target: 35.204.163.143/32
Classification: Google Cloud Infrastructure
Risk Level: LOW (Score: 25/100)
Report Date: 2026-08-06
---
## EXECUTIVE SUMMARY
IP 35.204.163.143 is a low-risk Google Cloud infrastructure address with no observable malicious activity. The IP is associated with Google LLC (AS396982) and is registered within the GOOGLE-CLOUD network (35.192.0.0/12). No threat indicators, blacklist entries, or campaign associations detected.
---
## INFRASTRUCTURE PROFILE
Ownership & Registration:
- Organization: Google LLC
- ASN: 396982 (GOOGLE-CLOUD)
- CIDR Block: 35.192.0.0/12
- RIR: ARIN
- Registration Date: Not publicly available
Geolocation:
- Country: Netherlands (NL)
- Region: GR
- City: Eemshaven
- Coordinates: 53.44°N, 6.84°E
- Timezone: Europe/Amsterdam
- Geo Confidence: 56% (multi-signal inference)
DNS Resolution:
- PTR Hostname: 143.163.204.35.bc.googleusercontent.com
- Domain: googleusercontent.com
- Forward Resolution: Confirmed (1 hostname)
- Email Auth: SPF and DMARC records present
---
## THREAT ASSESSMENT
Risk Indicators:
- Risk Score: 25 (Low)
- Provider Score: 0
- Authority Score: 0
- Abuse Confidence: None
- Blacklist Count: 0
- Known Attacker: No
- Tor Exit Node: No
- Spam Source: No
Network Classification:
- Infrastructure Type: Cloud Provider (Google Cloud)
- Service Purpose: Firewalled / No Services
- Open Ports: None detected
- TLS Certificate: None
- HTTP Service: None
Control Plane:
- BGP Prefix: 35.204.160.0/20
- Route Stability: False
- Operator Score: 0.3478 (Basic)
- DNSBL Listed: 1 of 8 lists
---
## OBSERVATION HISTORY
Historical Signals: 16 total observations
- Recent Activity: 2026-08-06
- Ownership Changes: 0
- Threat Persistence: 0 days
- Threat Observation Count: 0
- Persistently Malicious: No
Signal Types Observed:
- Geolocation inference (Eemshaven, NL)
- Operator score assessment (Basic)
- Network classification (Google Cloud)
- General profile data
Temporal Analysis: No evidence of escalating threat behavior. IP has demonstrated stable ownership and no persistent malicious activity.
---
## RELATIONSHIP ANALYSIS
Associated Entities: 8 relationships identified
- DNS Associations: 143.163.204.35.bc.googleusercontent.com
- Network Affiliations: GOOGLE-CLOUD (multiple instances)
No external relationships detected to other organizations, hostnames, or IP addresses outside the Google Cloud ecosystem.
---
## NEIGHBORHOOD ANALYSIS
Subnet: 35.204.163.143/24
- Neighbor Count: 0
- Abuse Density: 0%
- High-Risk Neighbors: 0
- Medium-Risk Neighbors: 0
- Low-Risk Neighbors: 0
Assessment: The immediate /24 subnet shows no adjacent malicious activity.
---
## SECURITY ACTIONS & RECOMMENDATIONS
Current Recommendations: None (Low Risk)
Firewall Policy:
- Standard Google Cloud egress/ingress policies apply
- No additional blocking required based on current threat profile
- Monitor for unusual outbound traffic patterns from this IP
Recommended Rules:
- Allow standard Google Cloud traffic patterns (443, 80, DNS)
- No blocking recommended for this IP at this time
---
## INTELLIGENCE CONCLUSION
IP 35.204.163.143 represents standard Google Cloud infrastructure with benign operational characteristics. The low risk score (25), absence of threat indicators, zero blacklist entries, and clean observation history support classification as a low-risk asset. No immediate defensive action required. SOC teams may monitor for anomalous behavior but should treat this IP as a legitimate cloud provider address.
Status: LOW RISK โ No action required
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGLE-CLOUD |
| CIDR Block | 35.192.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | 143.163.204.35.bc.googleusercontent.com |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | 143.163.204.35.bc.googleusercontent.com |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 40% | 2 | 3 |
| routing | 17% | 1 | 1 |
| services | 24% | 2 | 2 |
| ownership | 35% | 2 | 3 |
| reputation | 21% | 1 | 2 |
| geolocation | 35% | 2 | 3 |
| Overall | 28% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-08-01 10:25:20 UTC |
| Last Seen | 2026-08-13 02:36:24 UTC |
| Profile Built | 2026-08-13 02:50:11 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 22 |
Full dossier details are available via our API.