# IP Intelligence Briefing: 35.227.44.150/32
Classification: Moderate Risk Infrastructure Node
Date: Intelligence compiled from IPDebrief analysis
Status: Under Review
---
## Executive Summary
IP address 35.227.44.150/32 is identified as a Google Cloud infrastructure endpoint with a moderate risk score (50/100). The address resolves to Google LLC infrastructure in North Charleston, South Carolina, US, operating within the GOOGLE-CLOUD network (ASN 396982, CIDR 35.208.0.0/12). No active threat indicators or malicious reputation signals were detected, though the address maintains two DNSBL listings.
---
## Infrastructure Profile
| Attribute | Value |
|---|---|
| **Organization** | Google LLC |
| **Network Name** | GOOGLE-CLOUD |
| **ASN** | 396982 |
| **CIDR Block** | 35.208.0.0/12 |
| **Geolocation** | United States, South Carolina, North Charleston |
| **Timezone** | UTC-5 (Eastern Standard) |
| **Infrastructure Type** | Cloud Provider |
| **Network Role** | Firewalled / No Services |
---
## Threat Assessment
Risk Score: 50/100 (Moderate)
Threat Indicators
- Abuse Confidence Score: Not applicable (infrastructure provider)
- Blacklist Count: 0
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- Known Campaigns: None detected
DNSBL Status
- Lists Listed: 2 of 8 total DNSBL entries
- Status: Minor reputation friction, consistent with cloud infrastructure
Network Services
- Open Ports: None detected
- HTTP Services: Not available
- TLS Certificates: None
- Infrastructure State: Fully firewalled, no exposed services
---
## Network Relationships
DNS Associations
- Primary PTR: `150.44.227.35.bc.googleusercontent.com`
- Forward Resolution: Confirmed
- Hosted Domains: 0 (infrastructure-only address)
Network Associations
- Same Network: GOOGLE-CLOUD (35.208.0.0/12)
- Provider: Google Cloud Platform
Control Plane Data
- Origin ASN: 396982
- BGP Prefix: 35.227.32.0/20
- Route Stability: False (route changes detected in prior 30 days)
- RPKI State: Not evaluated
- DNSSEC Valid: Yes
- CAA Records: Present
---
## Neighborhood Analysis
Subnet: 35.227.44.150/24
Abuse Density: 0%
Classification: Clean
Total Siblings: 1
Active Siblings: 0
Threat Siblings: 0
No neighboring IPs were identified in the immediate /24 subnet, indicating isolated infrastructure deployment or minimal peer activity.
---
## Observation History
Total Observations: 17 signals recorded
Latest Activity: 2026-08-06 08:24 UTC
Historical Signals
1. Ownership Verification: Consistent Google LLC ownership (confidence 90%)
2. Geolocation Data: US-based location confirmed via Cymru Country (confidence 35%)
3. Subnet Classification: Clean classification with 0 abuse density
4. No Threat Persistence: Zero persistent malicious activity detected
5. Ownership Stability: No ownership changes observed
Risk Trajectory: Stable with no escalation patterns detected.
---
## Recommended Actions
Due to the moderate risk score (50) and DNSBL listings, the following defensive measures are recommended:
Firewall Rules
- iptables: `iptables -A INPUT -s 35.227.44.150 -j DROP`
- nftables: `nft add rule inet filter input ip saddr 35.227.44.150 drop`
- NGINX: `deny 35.227.44.150;`
- pfSense: `35.227.44.150/32`
- Cloudflare WAF: Block with expression `ip.src eq 35.227.44.150`
- AWS WAF: Add address `35.227.44.150/32` to block list
Operational Notes
- This address is Google Cloud infrastructure; false positives may occur due to cloud provider DNSBL listings
- No active services detected; firewall rules may impact legitimate traffic if the IP is used for outbound connections
- Monitor for changes in DNSBL status and risk score trends
---
## Intelligence Assessment
The IP address 35.227.44.150/32 represents standard Google Cloud infrastructure with a moderate risk profile primarily driven by DNSBL listings. No active malicious indicators, threat campaigns, or neighborhood contamination were identified. The moderate risk score warrants defensive monitoring but does not indicate immediate threat activity.
Recommended Priority: Low (Infrastructure Monitoring)
Action Required: Implement firewall rules as recommended; monitor for risk score changes
---
*Intelligence generated via IPDebrief platform. Recommendations should be validated against organizational security policies and combined with additional contextual signals before enforcement.*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGLE-CLOUD |
| CIDR Block | 35.208.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 150.44.227.35.bc.googleusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 150.44.227.35.bc.googleusercontent.com |
π DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 3 |
| routing | 17% | 1 | 1 |
| services | 24% | 2 | 2 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 24% | 2 | 2 |
| Overall | 25% | 10 | 13 |
| Data Coherence | Consistent (100%) |
| Attribution | High (85%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-08-05 18:28:30 UTC |
| Last Seen | 2026-08-13 08:16:22 UTC |
| Profile Built | 2026-08-13 08:30:58 UTC |
| Data Freshness | Live |
| Signal Types | 26 |
| Total Observations | 27 |
Full dossier details are available via our API.