104.198.143.113📋 Copy

IP INTELLIGENCE BRIEFING: 104.198.143.113

---

Executive Summary

IP address 104.198.143.113 is associated with Google Cloud infrastructure (ASN 396982, GOOGLE-CLOUD-PLATFORM). The IP demonstrates low-risk characteristics with a reputation score of 25 and no active threat indicators. The address resolves to a Googleusercontent.com host with standard DNS infrastructure configurations. No malicious activity or threat intelligence associations were detected across all intelligence sources.

---

Ownership and Network Classification

• Organization: Google LLC
• ASN: 396982 (GOOGLE-CLOUD-PLATFORM)
• Network Role: CloudCompute infrastructure
• Geolocation: Council Bluffs, IA, US (RIR: ARIN)
• CIDR Block: 104.198.128.0/19 (BGP prefix)
• Infrastructure Type: Cloud hosting environment

---

Risk Assessment

• Overall Risk Score: 25 (Low Risk)
• Abuse Confidence Score: Not elevated
• Blacklist Status: 0 blacklist entries
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Campaign Likelihood: None detected

---

Threat Intelligence Indicators

• Threat Feeds: No associations with known malicious campaigns
• Threat Persistence: 0 days observed
• Campaign Correlation: 0 correlated IPs
• Certificate Matches: 0
• Banner Analysis: No suspicious service banners detected

---

Network Neighborhood Analysis

• Subnet: 104.198.143.113/24
• Abuse Density: 0 (clean subnet)
• Neighbor Count: 0
• Risk Distribution: No high or medium risk neighbors detected
• Classification: Mostly clean subnet environment

---

DNS and Service Analysis

• PTR Hostname: 113.143.198.104.bc.googleusercontent.com
• Forward Resolution: Confirmed (1 hostname)
• Open Ports: None detected
• HTTP Services: Not exposed
• TLS Certificates: None observed
• Email Authentication: SPF and DMARC records present

---

Temporal Analysis

• Observations Count: 23 signals recorded
• Ownership Stability: No ownership changes detected
• Threat Observation Count: 1 (non-malicious)
• Recent Activity: Signals observed as recent as June 2026
• Is Persistently Malicious: No

---

Relationship Graph

• Total Relationships: 28 associations
• Primary Associations: DNS hostname associations (113.143.198.104.bc.googleusercontent.com)
• Network Associations: Multiple GOOGLE-CLOUD network references
• Malicious Entity Links: None detected

---

Recommended Actions

• Firewall Rules: No restrictive rules recommended
• Threat Response: No action required; IP classified as low-risk infrastructure
• Monitoring Level: Standard monitoring appropriate
• Block List: Not recommended for blocklist inclusion

---

Analysis Notes

This IP address represents legitimate Google Cloud infrastructure. The absence of open ports, lack of threat indicators, and clean neighborhood profile indicate this is a standard cloud computing endpoint rather than a compromised or malicious host. The DNS configuration (googleusercontent.com) suggests the IP may be used for cloud storage or content delivery services. No immediate threat mitigation actions are warranted.

Classification: LOW RISK / INFRASTRUCTURE

Priority: Standard

Recommendation: No action required

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.