104.196.111.60📋 Copy

# IP Intelligence Briefing: 104.196.111.60/32

Classification: Low Risk | Status: Routine Monitoring | Date: 2026-08-13

---

## Executive Summary

IP 104.196.111.60/32 is a Google Cloud infrastructure endpoint with a low risk score of 25. The address shows no malicious indicators, operates within a clean subnet, and exhibits stable ownership characteristics. No immediate security action required.

---

## Technical Profile

Ownership & Infrastructure

• ASN: 396982 | Organization: Google LLC | Netname: GOOGLE-CLOUD
• CIDR Block: 104.196.0.0/14
• Classification: Cloud infrastructure with firewalled/no services status
• Contact: Abuse contact available via RDAP

Geolocation

• Country: United States (US)
• Region: South Carolina (SC)
• City: Moncks Corner
• Coordinates: 33.21°N, -80.17°W
• Timezone: America/New_York

DNS Resolution

• PTR Hostname: 60.111.196.104.bc.googleusercontent.com
• Forward Resolution: Confirmed (googleusercontent.com)
• Domain: googleusercontent.com (Google CDN/hosting)
• Email Auth: SPF and DMARC records present

---

## Threat Assessment

Risk Score: 25/100 (Low Risk)

Threat Indicators: None detected

• Blacklist count: 0
• Pulsedive risk: Not listed
• Known campaigns: None
• Tor exit node: No
• Known attacker: No
• Spam source: No

Abuse Confidence: Not applicable (no malicious signals)

Network Role: Provider infrastructure (Google Cloud)

---

## Neighborhood Analysis

Subnet: 104.196.111.60/24

• Abuse Density: 0 (Clean)
• Active Siblings: 0
• Threat Siblings: 0
• Classification: Clean

The surrounding /24 subnet shows no abuse activity, supporting the conclusion that this IP operates in a benign cloud environment.

---

## Observation History

Total Observations: 20 signals tracked

Temporal Analysis: No evidence of escalating risk or persistent malicious behavior

Recent Activity:

• 2026-08-13: Multiple control plane signals (confidence 0.28–0.60)
• 2026-08-06: Service scanning events (no open ports discovered)
• Geolocation validation: ICMP blocked (unable to validate via probe)

Ownership Stability: No ownership changes recorded

---

## Related Entities

DNS Associations: 60.111.196.104.bc.googleusercontent.com (repeated)

Network Associations: GOOGLE-CLOUD (104.196.0.0/14)

The IP maintains consistent DNS and network relationships with Google Cloud infrastructure.

---

## Recommended Actions

Firewall Policy: Allow or monitor based on organizational policy; no blocking required

Risk Threshold: Below typical SOC alert thresholds

Additional Context: This is legitimate Google Cloud infrastructure commonly used for:

• Content delivery (googleusercontent.com domain)
• Cloud-hosted applications
• CDN operations

No specific firewall rules or blocking recommendations warranted at this time.

---

Analyst Notes: IP 104.196.111.60 exhibits characteristics of legitimate cloud infrastructure. If traffic from this address triggers security alerts, verify against known Google Cloud service patterns before taking action. The subnet shows no abuse correlation, and the IP demonstrates stable, benign operational characteristics.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.