104.198.91.11📋 Copy

# IP Intelligence Briefing: 104.198.91.11/32

## Executive Summary

IP 104.198.91.11 is a Google Cloud infrastructure address located in Tokyo, Japan. Risk assessment indicates Low Risk (Score: 25) with no active threat indicators. The address operates as a single-service host with standard SSH service exposure. No malicious activity or campaign associations detected.

## Ownership and Infrastructure

• Organization: Google LLC
• ASN: AS396982 (GOOGLE-CLOUD)
• CIDR Block: 104.196.0.0/14
• RIR: ARIN
• Network Classification: Google Cloud infrastructure
• Infrastructure Type: Single-Service Host

## Geolocation

• Country: Japan (JP)
• Region: 13
• City: Tokyo
• Coordinates: 35.68°N, 139.69°E
• Geographic Consensus: Validated across multiple sources

## Network Services

• Open Ports: TCP/22 (SSH)
• SSH Banner: SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18
• DNS Resolution: 11.91.198.104.bc.googleusercontent.com
• Domain: googleusercontent.com
• Email Authentication: SPF and DMARC records present

## Threat Assessment

• Risk Score: 25 (Low Risk)
• Abuse Confidence Score: Not applicable
• Blacklist Status: 0 listings
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Campaign Associations: None identified
• Threat Feeds: No matches

## Neighborhood Analysis

• Subnet: 104.198.91.11/24
• Abuse Density: 0 (clean)
• Threat Siblings: 0
• Classification: Clean
• Risk Distribution: No high/medium risk neighbors detected

## Observation History

Analysis of 18 signal observations indicates stable infrastructure behavior:

• Ownership: Consistent Google Cloud assignment with no changes
• Threat Persistence: 0 days of persistent malicious activity
• Geolocation: Consistent Tokyo, Japan reporting
• Recent Activity: SSH service exposure and standard DNS resolution

## Control Plane Data

• BGP Prefix: 104.198.80.0/20
• Route Stability: Inconsistent (isRouteStable: false)
• RPKI State: Not validated
• DNSSEC: Valid
• DNSBL Listings: 1 of 8 total lists

## Intelligence Assessment

104.198.91.11 represents legitimate Google Cloud infrastructure hosting services in the Tokyo region. The IP demonstrates standard operational behavior for cloud infrastructure with no indicators of compromise. The single SSH service exposure is consistent with cloud management interfaces. No blocking or filtering actions required at this time.

Recommendation: Monitor as known-good infrastructure. No firewall rules or blocking actions recommended.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.