35.227.94.44
## IP INTELLIGENCE BRIEFING: 35.227.94.44/32
Classification: Low Risk / Google Cloud Infrastructure
Generated: [Current Date]
Analyst: IPDebrief Intelligence Team
---
Executive Summary
IP 35.227.94.44/32 is a low-risk residential service endpoint hosted on Google Cloud infrastructure in North Charleston, SC. The IP demonstrates no malicious indicators, no blacklist associations, and no known threat campaign participation. Risk score of 25/100 indicates minimal threat profile.
---
Technical Profile
| Attribute | Value |
|---|---|
| **Risk Score** | 25 (Low Risk) |
| **Provider** | Google Cloud Platform |
| **Organization** | Google LLC |
| **Geolocation** | North Charleston, SC, US |
| **ASN** | 396982 |
| **CIDR Block** | 35.227.80.0/20 |
| **DNS Hostname** | 44.94.227.35.bc.googleusercontent.com |
| **Open Ports** | TCP/22 (SSH) |
| **Infrastructure Type** | Single-Service Host |
---
Threat Assessment
- Blacklist Status: No detections (0 DNSBL listings)
- Known Attacker: False
- Tor Exit Node: False
- Proxy/VPN: False
- Spam Source: False
- Campaign Association: None detected
---
Historical Observations
Analysis of 16 historical observations reveals consistent Google LLC ownership. The IP has maintained stable infrastructure characteristics with no ownership changes detected. Geovalidation shows a minor RTT discrepancy (claimed distance: 6,958km vs. measured RTT: 40ms), but this does not indicate malicious activity and is consistent with cloud infrastructure routing patterns.
---
Network Context
- Subnet Analysis: 35.227.94.0/24 contains only 1 active IP address (this host)
- Abuse Density: 0% (no malicious activity in neighborhood)
- Related Entities: Limited to DNS associations with googleusercontent.com hostname
- Control Plane: Stable routing with no route changes in 30-day period
---
Recommended Actions
1. Firewall Policy: Allow inbound SSH (port 22) only if legitimate service requires it; otherwise consider blocking
2. Monitoring: Standard monitoring recommended; no elevated threat posture detected
3. Block Decision: No immediate blocking required based on current risk assessment
---
Conclusion
This IP represents benign Google Cloud infrastructure with no evidence of compromise or malicious activity. The single open SSH port may indicate legitimate administrative access or unsecured service configuration. No immediate action required unless organizational policy restricts SSH access from cloud IPs.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGLE-CLOUD |
| CIDR Block | 35.208.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 44.94.227.35.bc.googleusercontent.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | 44.94.227.35.bc.googleusercontent.com |
🔐 DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Single-Service Host |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-10 05:12:04 UTC |
| Last Seen | 2026-08-31 00:00:23 UTC |
| Profile Built | 2026-08-31 00:08:15 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 26 |
Full dossier details are available via our API.