35.195.209.73📋 Copy

## IP Intelligence Briefing: 35.195.209.73/32

Date: 2026-07-30

Classification: Low Risk

Risk Score: 25/100

Executive Summary

IP address 35.195.209.73 is identified as a Google Cloud infrastructure address associated with Googleusercontent.com. The address demonstrates low-risk characteristics with no active threat indicators, though it maintains presence on 1 of 8 DNSBL lists. The IP is geolocated to New York, US, and operates within the 35.195.208.0/20 BGP prefix under ASN 396982.

Technical Profile

• ASN: 396982 (Google Cloud)
• Geolocation: New York, US (US-NY)
• Timezone: America/New_York
• DNS Resolution: 73.209.195.35.bc.googleusercontent.com
• PTR Record: Forward confirmed
• Service Status: Firewalled / No Services (no open ports detected)
• TLS/HTTP: No certificates or HTTP content observed

Network Classification

• Infrastructure Type: Cloud hosting (Google Cloud)
• Cloud Provider: Google Cloud
• Connection Type: Not identified as CDN, VPN, proxy, or Tor exit node
• IP Anycast: No
• Bogon: No
• Mobile/Residential: No

Threat Indicators

• Blacklist Presence: Listed on 1 DNSBL out of 8 total lists
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Campaign Affiliation: None detected
• Threat Persistence: Not persistently malicious

Control Plane Analysis

• Route Stability: Unstable (isRouteStable: false)
• RPKI State: Not validated
• DNSSEC: Valid
• CAA Records: Present
• Route Changes (30d): 0
• Multi-Origin AS (MOAS): No
• Operator Score: 0.3478 (Basic)
• Traceroute: 30 hops, 21 timed out, transit via Comcast

Observation History

The IP has generated 11 observations with the most recent signals from 2026-07-30. Key historical indicators include:

• DNSSEC Validation: Confirmed (confidence: 0.90)
• CAA Records: Present (confidence: 0.80)
• Blacklist Listings: 1 high-severity listing observed (confidence: 0.85)
• Operator Score: 0.3478 (Basic)

No significant threat persistence observed. The IP maintains stable DNS and routing characteristics with intermittent blacklist presence.

Neighborhood Analysis

• Subnet: 35.195.209.73/24
• Abuse Density: 0
• Total Siblings: 1
• Active Siblings: 0
• Threat Siblings: 0
• Neighbor IP: 35.195.209.215 (Risk Score: 25, Authority Score: 90)

The subnet demonstrates minimal abuse density with no correlated high-risk activity.

Relationships

• DNS Association: 73.209.195.35.bc.googleusercontent.com
• Hosted Domains: None
• Correlated IPs: None

Recommended Actions

The IP presents a low-risk profile with no actionable threat indicators. Recommended firewall posture:

• Allow: Standard cloud traffic patterns
• Monitor: DNSBL listings and routing instability
• Block: No immediate blocking required

No specific firewall rules generated based on current risk profile. The IP is associated with legitimate cloud infrastructure and poses minimal threat to network security operations.

Analyst Notes

This IP address represents normal cloud infrastructure activity for Google Cloud services. The single DNSBL listing appears to be a legacy or takedown-related indicator rather than active malicious behavior. The route instability and 21 timed-out traceroute hops are consistent with cloud provider routing practices. SOC teams may monitor for any changes in DNSBL presence or service behavior but no immediate action is warranted.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.