104.197.0.149📋 Copy

# IP Intelligence Briefing: 104.197.0.149/32

Classification: Low Risk | Provider: Google Cloud | Status: Routine Monitoring

---

## Executive Summary

Intel collected on 2026-06-19 indicates IP 104.197.0.149 is a Google Cloud infrastructure endpoint operating from Council Bluffs, IA. The address demonstrates low-risk characteristics consistent with legitimate cloud infrastructure deployment. No active threat indicators or malicious behavior observed during the analysis period.

---

## Infrastructure Profile

Network Role: The IP is classified as Google Cloud infrastructure with hosting services enabled. No open ports were detected during scanning; the service purpose indicates a firewalled configuration with no active services exposed to the public internet.

---

## Threat Assessment

Key Findings:

• No threat indicators detected across all monitored feeds
• No blacklist associations
• Not an exit node, proxy, or known attacker
• Email authentication (SPF/DMARC) configured on associated domain
• DNSSEC valid with CAA records present

---

## Neighborhood Analysis

Subnet: 104.197.0.149/24

• Abuse Density: 1 (low)
• Classification: Mostly clean
• Total Siblings: 1
• Active Siblings: 1
• Threat Siblings: 1

The /24 subnet shows minimal abuse activity. One threat sibling was identified within the subnet, indicating isolated rather than systemic compromise.

---

## Observation History

Total Observations: 25 signals collected (2026-06-14 through 2026-06-19)

Temporal Analysis:

• No significant threat persistence observed
• Ownership changes: 0
• Threat observation count: 1
• Not classified as persistently malicious

---

## Relationship Graph

69 relationships identified:

• DNS Associations: 149.0.197.104.bc.googleusercontent.com (repeated entries)
• Network Associations: GOOGLE-CLOUD (Google Cloud platform)

All relationships map to legitimate Google Cloud infrastructure components. No suspicious external associations detected.

---

## Recommended Actions

Priority: Routine Monitoring

1. Allow traffic to/from this IP at the firewall level (legitimate Google Cloud endpoint)

2. Monitor for any changes in DNS resolution or geolocation

3. No immediate blocking required – no threat indicators present

4. Maintain baseline traffic patterns for anomaly detection

Note: This IP represents standard Google Cloud infrastructure. Blocking would likely disrupt legitimate business operations. Focus on monitoring for behavioral anomalies rather than reputation-based filtering.

---

Report Generated: 2026-06-19

Analyst: IPDebrief Intelligence Team

Data Sources: IPDebrief Platform

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.