# Intelligence Briefing: 35.240.88.213
Classification: Moderate Risk | Status: Active Cloud Infrastructure
## Executive Summary
IP 35.240.88.213 is a Google Cloud Platform infrastructure address with a moderate overall risk score of 40. The IP resides within the GOOGLE-CLOUD network (35.208.0.0/12) and demonstrates mixed threat characteristics: while the immediate subnet shows clean abuse density and no threat siblings, the IP has historically exhibited threat indicators in recent observations. The address is firewalled with no open services, indicating defensive posture.
## Technical Profile
| Attribute | Value |
|---|---|
| **IP Address** | 35.240.88.213/32 |
| **Risk Score** | 40 (Moderate) |
| **Organization** | Google LLC (ASN 396982) |
| **Network Name** | GOOGLE-CLOUD |
| **CIDR Block** | 35.208.0.0/12 |
| **Geolocation** | Belgium (BE), St. Ghislain |
| **Infrastructure Type** | CloudCompute |
| **DNS Target** | 213.88.240.35.bc.googleusercontent.com |
## Threat Assessment
- Known Campaigns: None detected
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Blacklist Count: 0
- DNSBL Listed: 2 of 8 total lists
The IP is classified as a cloud host with firewalled/no services status. No open ports were detected, and no TLS certificates or HTTP services are exposed.
## Subnet Context (35.240.88.0/24)
- Abuse Density: 0 (Clean)
- Total Siblings: 2
- Active Siblings: 2
- Threat Siblings: 0
- Neighbor Risk: 35.240.88.248 shows low risk (score 25)
The local /24 subnet demonstrates benign characteristics with no threat-adjacent neighbors.
## Historical Signals (22 Observations)
Recent activity includes:
- August 13, 2026: Threat indicators observed with 3 associated pulses
- August 6, 2026: Subnet classified as clean with no inherited risk
- DNS Operator Score: Basic classification (0.3478)
The observation history shows intermittent threat signals in August 2026, though the current subnet classification remains clean.
## Related Entities
- Network: GOOGLE-CLOUD (multiple associations)
- Hostname: 213.88.240.35.bc.googleusercontent.com (DNS association)
## Recommended Actions
Given the moderate risk profile and firewalled status:
1. Monitor traffic patterns from this IP for anomalous behavior
2. Review any inbound/outbound connections during active threat periods
3. Log all activity for forensic readiness
4. No immediate blocking recommended given clean subnet context and Google Cloud infrastructure
---
*Intelligence generated by IPDebrief Analysis Platform*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGLE-CLOUD |
| CIDR Block | 35.208.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR | 213.88.240.35.bc.googleusercontent.com |
| Forward Confirmed | Yes โ FCrDNS verified |
| Forward Hostnames | 213.88.240.35.bc.googleusercontent.com |
๐ DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 โ Basic operator with some routing infrastructure |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 3 |
| routing | 17% | 1 | 1 |
| services | 24% | 2 | 2 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 35% | 2 | 3 |
| Overall | 27% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-07-31 05:28:28 UTC |
| Last Seen | 2026-08-13 01:27:22 UTC |
| Profile Built | 2026-08-13 01:39:29 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 24 |
Full dossier details are available via our API.