104.197.153.217📋 Copy

# IP Intelligence Briefing: 104.197.153.217

## Executive Summary

IP address 104.197.153.217 is classified as Low Risk (Risk Score: 25) with no active threat indicators. The IP belongs to Google LLC's cloud infrastructure (GOOGLE-CLOUD, ASN 396982) and demonstrates no malicious activity patterns. No blocking or restriction actions are recommended.

## Ownership and Network Classification

• Organization: Google LLC
• Network: GOOGLE-CLOUD (104.196.0.0/14)
• ASN: 396982
• RIR: ARIN
• Network Type: Cloud Infrastructure (Google Cloud Platform)
• Contact: google-cloud-compliance@google.com

## Geolocation Assessment

• Claimed Location: Council Bluffs, IA, US
• Coordinates: 41.88°N, -93.1°W
• Validation Status: GEOPLAUSIBLE = FALSE
• Issue: RTT violation detected (55ms measured vs. minimum 144.4ms required for 7,219km distance). This discrepancy is consistent with cloud infrastructure deployments where geolocation data may be approximate or use anycast routing.

## Threat Intelligence

• Risk Score: 25 (Low Risk)
• Blacklist Count: 0
• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Abuse Confidence: Not flagged
• Threat Persistence: 0 days
• Campaign Correlation: None detected

## Network Behavior

• Services: No open ports detected (firewalled/no services)
• DNS Resolution: 217.153.197.104.bc.googleusercontent.com
• Forward Confirmed: Yes
• Email Auth: SPF and DMARC records present
• Neighbor Density: 0 (clean subnet, 104.197.153.0/24)

## Observation History

16 total observations recorded. All signals indicate stable, benign infrastructure behavior:

• Ownership signals: Stable (0 changes detected)
• Geolocation signals: Consistent with US region despite RTT anomalies
• Threat signals: None detected across observation period

## Relationship Analysis

• DNS Associations: 217.153.197.104.bc.googleusercontent.com (repeated)
• Network Association: GOOGLE-CLOUD (repeated)
• No external entity relationships or campaign correlations identified.

## Neighborhood Assessment

Subnet 104.197.153.0/24 analyzed:

• Total Siblings: 0
• Active Siblings: 0
• Threat Siblings: 0
• Abuse Density: 0.0

## Recommended Actions

No security actions required. The IP address represents legitimate Google Cloud infrastructure with no indicators of compromise. Standard monitoring and logging practices are sufficient. No firewall rules or blocking recommendations apply.

---

*Report generated: [Current Date]*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.