104.198.187.5📋 Copy

# IP Intelligence Briefing: 104.198.187.5/32

Classification: Low Risk | Last Updated: 2026-06-20

## Executive Summary

IP address 104.198.187.5 operates within Google Cloud infrastructure and presents a low-risk threat profile (score: 25). No malicious activity, blacklisting, or campaign associations were detected. The IP resolves to Google's content delivery network and is hosted on Council Bluffs, Iowa.

## Infrastructure Profile

• Organization: Google LLC (ASN 396982)
• Infrastructure Type: CloudCompute (Google Cloud Platform)
• BGP Prefix: 104.198.176.0/20
• Network Classification: Cloud hosting provider with firewall protection
• Geolocation: Council Bluffs, IA, US (830 km accuracy radius)
• DNS Resolution: 5.187.198.104.bc.googleusercontent.com (googleusercontent.com)

## Threat Assessment

Risk Score: 25 (Low Risk)

No active threat indicators were observed:

• No known attacker associations
• No spam source designation
• Zero blacklist entries (0/8 DNSBL lists checked)
• No Tor exit node or proxy classification
• No active scanning or scanning behavior detected

## Technical Observations

• Services: No open ports detected; connection type shows firewall protection with no services exposed
• Email Authentication: SPF and DMARC records present (domain: googleusercontent.com)
• Control Plane: Route stability issues noted (isRouteStable: false); RPKI state not applicable
• DNSSEC: Valid; CAA records present

## Temporal Analysis

• Observation Count: 1 threat observation recorded
• Threat Persistence: 0 days (not persistently malicious)
• Ownership Stability: No ownership changes detected
• Recent Signals: All observations from 2026-06-20, showing consistent cloud infrastructure classification

## Neighborhood Context (104.198.187.0/24)

• Subnet Abuse Density: 0 (mostly clean)
• Total Siblings: 1 active IP
• Threat Siblings: 1 (indicating minimal neighbor-level risk)
• Risk Distribution: No high or medium risk neighbors detected

## Relationship Graph

• 38 total relationships identified
• Primary association: DNS hostname 5.187.198.104.bc.googleusercontent.com
• Network affiliation: GOOGLE-CLOUD
• No anomalous or suspicious relationships detected

## Recommended Security Actions

Classification: Monitor | No blocking required

Given the IP's classification as Google Cloud infrastructure with no malicious indicators:

1. Allow Traffic: No firewall blocking recommended

2. Monitor: Standard logging for inbound connections

3. Threat Hunting: No active hunting required

## Intelligence Narrative

The IP address 104.198.187.5 is a legitimate Google Cloud infrastructure endpoint with no evidence of malicious activity. The IP operates within a clean subnet (104.198.187.0/24) with minimal abuse density. All relationship data points to standard Google Cloud DNS and network associations. The absence of open ports and firewall protection aligns with expected cloud hosting behavior. No blocking or mitigation actions are warranted. This IP should be treated as benign infrastructure with standard monitoring practices.

Assessment Confidence: High (consistent signals across 20 observations)

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.