104.197.113.227📋 Copy

# IP Intelligence Briefing: 104.197.113.227

Classification: Low Risk – Google Cloud Infrastructure

Date: Current Intelligence Cycle

Analyst: IPDebrief Intelligence Unit

---

## Executive Summary

IP 104.197.113.227 is identified as Google Cloud Platform infrastructure with a low-risk profile. No active threat indicators detected. The IP resolves to a Google user content endpoint and operates within a clean network neighborhood. No blocking or filtering actions recommended at this time.

---

## Infrastructure Profile

Ownership & Registration:

• Organization: Google LLC
• ASN: 396982 (GOOGLE-CLOUD-PLATFORM)
• Network: Google Cloud Platform
• CIDR Block: 104.197.112.0/20
• RIR: ARIN

Geolocation:

• Country: United States (US)
• Region: Iowa (IA)
• City: Council Bluffs
• Timezone: America/Chicago
• Geo-validation: Consensus confirmed (plausible)

Network Role:

• Infrastructure Type: Cloud Compute
• Classification: Cloud Provider
• Service Purpose: Firewalled / No Services

---

## Threat Assessment

Risk Score: 25/100 (Low Risk)

Threat Indicators:

• Blacklist Count: 0
• Known Attacker: False
• Tor Exit Node: False
• Spam Source: False
• Abuse Confidence Score: Not elevated

DNS Reputation:

• PTR Hostname: 227.113.197.104.bc.googleusercontent.com
• Forward Resolution: Confirmed
• Email Auth: SPF and DMARC configured
• DNSBL Listed: 1 of 8 total lists (routine provider listing)

Services:

• Open Ports: None detected
• TLS Certificate: Not exposed
• HTTP Services: Not exposed

---

## Observation History

Signals Observed: 24 historical observations

Timeline Summary:

• Most recent signals (June 2026): Minimal threat indicators, basic operator scoring
• Ownership: Stable Google Cloud assignment
• Threat persistence: None observed
• No persistent malicious activity pattern

Temporal Analysis:

• Ownership changes: 0
• Threat observation count: 1
• Is persistently malicious: False

---

## Network Relationships

Associated Entities (80 relationships):

• DNS associations to googleusercontent.com hostnames
• Network affiliation: GOOGLE-CLOUD
• No direct links to known malicious campaigns
• No certificate matches for malicious campaigns

Subnet Context (104.197.113.0/24):

• Abuse Density: 0/256 (clean subnet)
• Classification: Mostly Clean
• Active Siblings: 1
• Threat Siblings: 1 (minimal neighborhood risk)

---

## Recommended Actions

Security Posture:

• No immediate blocking recommended
• Standard cloud provider monitoring applies
• No specific firewall rules required

SOC Monitoring:

• No escalation required
• No IOC correlation needed
• Continue standard provider-based monitoring

---

## Conclusion

IP 104.197.113.227 represents legitimate Google Cloud infrastructure with no observed malicious activity. The IP is properly configured with standard security controls (SPF/DMARC) and operates within a clean network environment. No defensive actions required beyond routine cloud provider monitoring practices.

Confidence Level: High – Infrastructure clearly identified as Google Cloud with benign risk profile.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.