35.223.147.6

{ } JSON 🔧 Full Actions API

🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

IP INTELLIGENCE BRIEFING: 35.223.147.6

Classification: Cloud Infrastructure (Google Cloud) | Risk Score: 25/100 (Low Risk)

---

OWNERSHIP & INFRASTRUCTURE

Organization: Google LLC (ASN 396982)
Network: GOOGLE-CLOUD, 35.208.0.0/12
Geolocation: New York, US (US-NY)
Infrastructure Type: CloudCompute (isCloud: true, isHosting: true)
Network Role: No active services detected; firewalled/no services exposed

---

THREAT INDICATORS

Blacklist Status: 1 listing detected (high severity)
Known Attacker: No
Tor Exit Node: No
Spam Source: No
Campaign Associations: None identified
Reputation Sources: None recorded

---

DNS & RESOLUTION

PTR Hostname: 6.147.223.35.bc.googleusercontent.com
Forward Resolution: Confirmed to googleusercontent.com
DNSSEC: Valid
CAA Records: Present
Email Auth: SPF and DMARC configured

---

OBSERVATION HISTORY (17 signals)

Recent observations (2026-08-13) include:

DNS resolution for googleusercontent.com
SSH banner: SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.16
One high-severity blacklist listing detected
Geolocation inference (Council Bluffs, IA)

---

SUBNET ANALYSIS

/24 Neighbors: 0 active siblings in 35.223.147.0/24
Abuse Density: 0%
Risk Distribution: No high-risk IPs in immediate subnet
Classification: Sparse allocation (likely single-use cloud instance)

---

RELATIONSHIP GRAPH

Network association: GOOGLE-CLOUD (35.223.147.0/24)
DNS association: 6.147.223.35.bc.googleusercontent.com
No certificate or organizational entity associations

---

RECOMMENDATIONS

No firewall actions required (risk score 25/100)
Monitor for changes in blacklist status
Standard cloud traffic patterns expected; no anomalous behavior detected
No active threat indicators present

---

ASSESSMENT

This IP address represents a Google Cloud infrastructure endpoint with low-risk characteristics. The single blacklist listing warrants monitoring but does not indicate active malicious behavior. The IP shows no evidence of being used for attacks, spam distribution, or command-and-control activity. Standard cloud traffic handling is appropriate.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

Country	🇺🇸 United States
Region	IA
City	Council Bluffs
Timezone	America/Chicago
Latitude	41.88
Longitude	-93.10

🏢 Ownership & Registration

Organization	Google LLC
ASN	AS396982
Network Name	GOOGLE-CLOUD
CIDR Block	35.208.0.0/12
RIR	ARIN
Country	United States
Abuse Contact	Available via RDAP

🌐 DNS Intelligence

PTR	6.147.223.35.bc.googleusercontent.com
Forward Confirmed	Yes — FCrDNS verified
Forward Hostnames	`6.147.223.35.bc.googleusercontent.com`

🔐 DNS Hygiene

Hygiene Score	100% (Excellent)
SPF	Present
DMARC	Present
FCrDNS	Verified
DNSSEC	Valid
CAA	Present

☁️ Network Classification

Infrastructure	Infrastructure / Datacenter
Service Purpose	Single-Service Host
Network Tier	Hosting — Infrastructure provider without advanced routing

CloudHosting

🔌 Services & Open Ports

Port	Service	Protocol	Banner
22	ssh	tcp	SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.16
Closed Ports	25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned)

Server	—
HTTP Title	—
SSH Version	SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.16

🔐 TLS Certificate

🔒

No certificate

Issued by —

N/A

SANs	None
Valid From	—
Valid Until	—

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

Dimension	Score	Sources	Observations
threat	0%	0	0
routing	0%	0	0
services	0%	0	0
ownership	50%	2	3
reputation	0%	0	0
geolocation	0%	0	0
Overall	8%	2	3

Coverage: 1/6 dimensions · Data sufficiency: partial

Data Coherence	Consistent (100%)
Attribution	Moderate (70%)
	OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

📅 Observation Timeline 🔄 Live

First Seen	2026-08-10 23:37:07 UTC
Last Seen	2026-08-30 22:54:34 UTC
Profile Built	2026-08-29 04:01:12 UTC
Data Freshness	Live
Signal Types	21
Total Observations	24

🔍 21 signal types · 24 observations collected

This report is generated from 21+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.

{ } JSON API 🔧 Actions API 📧 Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.

35.223.147.6📋 Copy