35.156.201.6📋 Copy

# IP Intelligence Briefing: 35.156.201.6/32

Classification: LOW RISK

Date of Analysis: 2026-06-20

Prepared For: SOC Operations

---

## Executive Summary

IP address 35.156.201.6 was analyzed and classified as low risk with a risk score of 0. The IP is identified as an Amazon Web Services (AWS) EC2 instance in Frankfurt, Germany, operating a public web server with standard e-commerce or business functionality. No malicious indicators, blacklists, or threat associations were detected.

---

## Ownership and Infrastructure

The IP resolves to hostname `ec2-35-156-201-6.eu-central-1.compute.amazonaws.com` with reverse DNS confirmation. Forward resolution is consistent with AWS infrastructure patterns.

---

## Network Services and Configuration

Open Ports:

• TCP/80 (HTTP)
• TCP/443 (HTTPS)
• TCP/22 (SSH)

Web Server Configuration:

• Server: nginx/1.25.5
• HTTP/2.0 enabled
• HSTS configured (max-age=31536000; includeSubDomains)
• Content Security Policy (CSP) active
• Content-Type Options header present
• Robots.txt present (disallow all)

SSL/TLS Certificate:

• Issuer: Let's Encrypt
• Subject: work.aigentifyable.com
• Certificate chain valid

DNS Security:

• DNSSEC: Valid
• SPF: Present
• DMARC: Present
• RPKI State: Inferred as valid

---

## Threat Assessment

No threat indicators, malware signatures, or attack campaign associations were identified in the threat feed analysis.

---

## Historical Observations

Twenty-three signal observations were recorded, with the most recent activity on 2026-06-20. Historical trends indicate:

• Infrastructure Consistency: Cloud infrastructure classification (AWS) maintained across all observations
• Location Stability: Frankfurt, DE location consistently reported
• Routing Stability: BGP route stable with no recent route changes
• Operator Score: 0.4783 (Basic) - consistent across observations
• HTTP Response: Status 200 with HSTS enabled throughout observation period

No degradation in security posture or emergence of malicious behavior was observed over the observation window.

---

## Network Relationships

DNS Associations:

• ec2-35-156-201-6.eu-central-1.compute.amazonaws.com (primary)

Network Relationships:

• Same Network: AMAZO-ZFRA
• Total Relationships: 40

The IP maintains standard AWS EC2 naming conventions with no anomalous associations to third-party infrastructure.

---

## Neighborhood Analysis

Subnet: 35.156.201.6/24

• Abuse Density: 0 (mostly clean)
• Neighbor Count: 1 active sibling
• Threat Siblings: 1
• Inherited Risk: 2

The /24 subnet shows minimal abuse activity. The single threat sibling represents typical AWS infrastructure risk rather than coordinated malicious activity.

---

## Recommended Actions

Current Risk Level: Low

No immediate mitigation actions are recommended based on this analysis. The IP address operates within standard AWS cloud infrastructure parameters with proper security configurations (HSTS, CSP, DNSSEC, SPF, DMARC).

Suggested Monitoring:

• Continue passive observation for behavioral anomalies
• Monitor for changes in TLS certificate or service configuration
• Track for any emergence of blacklist associations

---

## Conclusion

IP address 35.156.201.6 represents benign AWS infrastructure hosting a public web server with appropriate security configurations. No defensive actions are required at this time. Standard logging and monitoring practices apply.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.