# IP INTELLIGENCE BRIEFING
Target: 35.190.221.98/32
Classification: Low Risk
Date: Current Analysis Cycle
---
## EXECUTIVE SUMMARY
IP address 35.190.221.98 is associated with Google Cloud infrastructure in Belgium. The IP presents low risk characteristics (risk score: 25) with no known malicious activity or threat indicators. The IP is firewalled with no open services and is not a known attacker, spam source, or Tor exit node.
---
## INFRASTRUCTURE PROFILE
- Organization: Google LLC
- Network Provider: Google Cloud
- Geolocation: Brussels, Belgium (BE)
- ASN: 396982
- BGP Prefix: 35.190.208.0/20
- Routing Status: Route instability detected (isRouteStable: false)
- DNS Resolution: 98.221.190.35.bc.googleusercontent.com
- Reverse DNS: 98.221.190.35.bc.googleusercontent.com
- DNSBL Status: Listed on 1 of 8 DNSBL lists
- Services: Firewalled / No open ports detected
---
## THREAT ASSESSMENT
- Risk Score: 25 (Low Risk)
- Abuse Confidence: Not applicable (legitimate infrastructure)
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- Blacklist Count: 0
- Threat Feeds: No active indicators
- Campaign Association: No matches
---
## NEIGHBORHOOD ANALYSIS (35.190.221.0/24)
- Abuse Density: 0.5 (Low-Moderate)
- Subnet Classification: Mostly Clean
- Total Sibling IPs: 2
- Active Siblings: 1
- Threat Siblings: 1
- Notable Neighbor: 35.190.221.63 (Risk Score: 25, Authority Score: 90)
---
## OBSERVATION HISTORY
- Total Observations: 30 signal records
- Recent Activity: Multiple observations from 2026-07-29
- Ownership Consistency: Google LLC consistently identified
- Threat Persistence: No persistent malicious behavior detected
- Geo Consensus: Confirmed (plausible)
- Network Traceroute: 10 hops via Comcast transit
---
## RELATIONSHIP GRAPH
- Total Relationships: 12
- Relationship Type: DNS Association (all 12 point to same hostname)
- Associated Hostname: 98.221.190.35.bc.googleusercontent.com
- No Additional Relationships: No subnet, organization, or certificate associations beyond DNS
---
## SECURITY ACTIONS
- Recommended Action: No immediate blocking required
- Classification: Legitimate cloud infrastructure
- Monitoring: Standard monitoring recommended due to DNSBL listing
- Firewall Rules: No specific firewall rules required for this IP
- Risk Mitigation: N/A (low risk profile)
---
## INTELLIGENCE CONCLUSION
IP 35.190.221.98 represents legitimate Google Cloud infrastructure with minimal threat indicators. The single DNSBL listing requires standard verification but does not indicate active malicious use. The IP is part of a low-abuse-density subnet with one threat sibling identified. No immediate defensive action required; maintain standard monitoring protocols for cloud infrastructure.
Analyst Notes: Route instability detected may warrant periodic re-validation. Monitor associated hostname for any anomalous activity.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGLE-CLOUD |
| CIDR Block | 35.184.0.0/13 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | 98.221.190.35.bc.googleusercontent.com |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | 98.221.190.35.bc.googleusercontent.com |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 56% | 2 | 11 |
| routing | 60% | 2 | 24 |
| services | 19% | 2 | 2 |
| ownership | 30% | 3 | 4 |
| reputation | 26% | 1 | 3 |
| geolocation | 33% | 2 | 3 |
| Overall | 37% | 12 | 47 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-07-21 06:47:25 UTC |
| Last Seen | 2026-08-13 12:54:42 UTC |
| Profile Built | 2026-08-13 13:19:25 UTC |
| Data Freshness | Live |
| Signal Types | 28 |
| Total Observations | 82 |
Full dossier details are available via our API.