35.195.83.120📋 Copy

# IP Intelligence Briefing: 35.195.83.120/32

## Executive Summary

IP address 35.195.83.120 is a Google Cloud infrastructure resource with moderate risk scoring (50/100). The address shows no active threat indicators but is listed on 2 of 8 DNSBLs with high severity ratings. No open ports or services detected; classified as "Firewalled / No Services." Recommended action: block traffic from this IP at perimeter defenses.

## Ownership & Infrastructure

• Organization: Google LLC (GOOGLE-CLOUD)
• ASN: 396982
• CIDR Block: 35.192.0.0/12
• Geolocation: United States (New York, ARIN registry)
• Network Role: Google Cloud infrastructure provider

## Risk Assessment

## Technical Profile

• DNS Resolution: 120.83.195.35.bc.googleusercontent.com (googleusercontent.com)
• PTR Record: 120.83.195.35.bc.googleusercontent.com
• DNSSEC: Valid
• CAA Records: Present
• Open Ports: None detected
• Services: None exposed
• Infrastructure Type: Google Cloud (firewalled)

## Network Behavior

• Traceroute: 11 hops; transit networks include Comcast
• Route Stability: Unstable (changes detected)
• BGP Prefix: 35.195.80.0/20

## Historical Observations

14 observations recorded. Recent signals indicate:

• Consistent ownership by Google LLC
• Persistent geolocation data
• Blacklist activity detected (2 listings, high severity)
• DNS configuration stable

## Relationship Graph

• DNS Associations: 120.83.195.35.bc.googleusercontent.com
• Network Affiliation: GOOGLE-CLOUD (35.195.83.0/24)

## Neighborhood Analysis

• Subnet: 35.195.83.0/24
• Abuse Density: 0%
• Threat Siblings: 0
• Active Siblings: 0

## Recommended Actions

Based on risk profile, the following firewall rules are recommended:

iptables: `iptables -A INPUT -s 35.195.83.120 -j DROP`

nftables: `nft add rule inet filter input ip saddr 35.195.83.120 drop`

nginx: `deny 35.195.83.120;`

pfSense: `35.195.83.120/32`

Cloudflare WAF: Block IP (expression: `ip.src eq 35.195.83.120`)

AWS WAF: Add IP to allow/deny list (Addresses: 35.195.83.120/32)

---

Intelligence Assessment: This IP represents Google Cloud infrastructure with elevated but not confirmed malicious activity. The moderate risk score correlates with DNSBL listings rather than active threat indicators. Blocking is recommended pending further correlation with known threat actor infrastructure.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.