35.226.149.223📋 Copy

# IP Intelligence Briefing: 35.226.149.223/32

## Executive Summary

IP address 35.226.149.223/32 is a Google Cloud infrastructure endpoint with a low-risk profile (Risk Score: 25). The IP is associated with Google LLC (ASN 396982) within the GOOGLE-CLOUD network block (35.208.0.0/12). No active threat indicators or malicious activity were observed. The IP is currently geolocated to Council Bluffs, IA, US, though this represents a cloud infrastructure location rather than physical hosting.

## Risk Assessment

Overall Risk Score: 25 (Low Risk)

• Provider Score: 0
• Authority Score: 0
• Stability Score: 0
• Reputation: Low Risk

Threat Indicators: None detected

• Blacklist Count: 0
• Is Tor Exit: No
• Is Known Attacker: No
• Is Spam Source: No
• Known Campaigns: None

## Infrastructure Profile

Ownership:

• Organization: Google LLC
• ASN: 396982
• Network: GOOGLE-CLOUD (35.208.0.0/12)
• Registration: ARIN

Network Classification:

• Infrastructure Type: CloudCompute
• Connection Type: Cloud Provider
• Status: Firewalled / No Services Detected
• Open Ports: None (firewalled)

## Geolocation Data

• Country: United States (US)
• Region: Iowa (IA)
• City: Council Bluffs
• Coordinates: 41.88, -93.1
• Timezone: America/Chicago
• Accuracy Radius: 200km

*Note: Geolocation reflects cloud infrastructure placement; actual server location may differ.*

## DNS Analysis

• PTR Hostname: 223.149.226.35.bc.googleusercontent.com
• Forward Resolution: Confirmed
• Hosted Domain: googleusercontent.com
• Email Authentication: SPF and DMARC records present
• Forward Resolution Count: 1

## Control Plane & Routing

• BGP Prefix: 35.226.144.0/20
• Origin ASN: 396982
• Route Stability: Not stable (route changes detected in 30-day period)
• DNSSEC: Valid
• DNSBL Listings: 8 total lists (1 high severity listing detected in history)
• Operator Score: Basic (0.3478)
• RPKI State: Not verified

## Neighborhood Analysis

Subnet: 35.226.149.223/24

• Abuse Density: 0% (Clean)
• Classification: Clean
• Total Sibling IPs: 1
• Active Siblings: 1
• Threat Siblings: 0

No neighboring IPs in the /24 subnet exhibit abuse indicators. The subnet shows minimal activity consistent with low-traffic Google Cloud infrastructure.

## Historical Observations

Signal History (24 observations):

• Most recent signals (2026-08-12): Cloud infrastructure classification maintained
• Infrastructure Type: CloudCompute
• Operator Score: Basic (0.3478)
• DNSBL Activity: 1 listing detected with high severity
• Subnet Classification: Consistently "clean" with 0 abuse density
• Threat Persistence: None (0 threat observation days)

The IP has maintained a consistent low-risk profile throughout observation history with no escalation in threat indicators.

## Relationships

The IP shows associations with:

• DNS hostname: 223.149.226.35.bc.googleusercontent.com
• Network: GOOGLE-CLOUD

Multiple relationship records confirm consistent DNS and network associations with Google Cloud infrastructure.

## Recommended Actions

No immediate action required. The IP represents standard Google Cloud infrastructure with no threat indicators.

For SOC analysts:

• No firewall blocking recommended
• No threat hunting required
• Normal traffic to/from this IP should be permitted as legitimate cloud infrastructure communication
• Monitor for any unusual outbound connections if the IP is observed in suspicious inbound contexts

## Conclusion

IP 35.226.149.223/32 is a benign Google Cloud infrastructure endpoint with no threat indicators. The IP is part of a clean subnet with no neighboring abuse activity. No security actions are recommended. Traffic involving this IP should be treated as legitimate cloud infrastructure communication.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.