104.196.30.31📋 Copy

# IP Intelligence Briefing: 104.196.30.31

## Executive Summary

IP address 104.196.30.31/32 is associated with Google Cloud infrastructure. The IP maintains a Low Risk reputation profile with no active threat indicators, open services, or blacklist entries. Network classification identifies it as cloud infrastructure with firewalled/no services status.

## Ownership and Classification

## Geolocation Data

• Country: United States (US)
• Region: South Carolina (SC) / California (CA) – signals show geographic variance
• City: Moncks Corner, SC (primary consensus)
• Coordinates: 33.21, -80.17
• Accuracy Radius: 150 km
• Geo Validation: Plausible (ICMP validation blocked)

## Network Services and Ports

• Open Ports: None detected
• Service Status: Firewalled / No Services
• TLS Certificates: None
• HTTP Title: None
• Server Banner: None

## DNS Resolution

• Reverse DNS: 31.30.196.104.bc.googleusercontent.com
• Forward DNS: 31.30.196.104.bc.googleusercontent.com
• Forward Resolution Count: 1
• Forward Confirmed: Yes
• Email Auth: SPF and DMARC records present

## Threat Intelligence

• Abuse Confidence Score: Not applicable (cloud infrastructure)
• Blacklist Count: 0
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Known Campaigns: None
• Threat Feeds: None populated

## Control Plane Analysis

• Origin ASN: 396982
• BGP Prefix: 104.196.16.0/20
• Route Stability: False (route changes detected)
• RPKI State: Not evaluated
• Operator Score: 0.3478 (Basic)
• DNSSEC Valid: Yes
• DNSBL Listed: 0/8 lists

## Signal Observation History

• Total Observations: 21 signals recorded
• Most Recent Signal: 2026-07-30T18:44:51 UTC
• Abuse Density: 1 (low)
• Classification: Mostly Clean
• Threat Persistence Days: 0
• Ownership Changes: 0
• Observation Pattern: Signals concentrated within 2026-07-30 timeframe

## Relationship Graph

• Total Relationships: 5
• DNS Associations: 4 entries (all to 31.30.196.104.bc.googleusercontent.com)
• Network Associations: 1 (GOOGLE-CLOUD network)
• Organizations: None beyond Google LLC
• Certificates: None detected

## Neighborhood Analysis

• Subnet: 104.196.30.31/24
• Neighbor Count: 0
• Abuse Density: 0
• High Risk Siblings: 0
• Medium Risk Siblings: 0
• Low Risk Siblings: 0
• Active Siblings: 0
• Threat Siblings: 0

## Security Recommendations

Based on the IP's risk profile and operational characteristics:

1. Allow Traffic: No blocking required. The IP is Google Cloud infrastructure with no malicious indicators.

2. No Firewall Rules Needed: Services are firewalled with no open ports.

3. Monitor Route Changes: Route stability flag indicates potential BGP changes; monitor for route hijacking if this IP is critical.

4. Email Policy: SPF and DMARC records are present; no email reputation issues detected.

## Intelligence Narrative

The IP 104.196.30.31/32 operates as Google Cloud infrastructure with a clean risk profile. No threat indicators, blacklisting, or malicious activity observed. The IP resolves to googleusercontent.com with consistent DNS records and proper email authentication (SPF/DMARC). Geographic location shows some variance between SC and CA signals, which is common for cloud infrastructure with multi-region deployments. The subnet demonstrates zero abuse density and no sibling threats. Route stability is marked as false, suggesting potential BGP prefix changes; this warrants monitoring but does not indicate malicious activity. Overall, the IP presents a benign operational profile suitable for normal traffic handling with no defensive actions required.

---

Classification: Unclassified

Generated: 2026-07-30

Tool Version: IPDebrief Intelligence Platform

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.