IP Intelligence Briefing: 104.199.107.194
Date: 2026-06-16
---
**1. IP Profile**
- Risk Score: 25 (Low Risk)
- Ownership:
- AS: AS396982 (Google LLC)
- Network: GOOGLE-CLOUD (ARIN registered)
- Subnet: 104.196.0.0/14
- Geolocation:
- Country: United States (US)
- Region: Brussels Capital
- City: Brussels
- Accuracy Radius: 2,500 km
- Network Role:
- Provider: Google Cloud Platform
- Infrastructure: CloudCompute (firewalled, no services exposed)
- Hosting: Yes (likely cloud instance)
---
**2. Threat Indicators**
- Malicious Activity: None detected (no indicators, blacklist entries, or campaigns).
- DNS Security:
- SPF/DKIM/DMArc records present for `googleusercontent.com`.
- DNSSEC validated.
- TLS/Services: No open ports or active services detected.
---
**3. Observation History (Last 7 Days)**
- Consistent Low Risk: No spikes in threat signals or network anomalies.
- Stability: Route stability score: 0.3478 (Basic operator rating).
- Geolocation Validity: ICMP blocked, unable to validate RTT.
---
**4. Network Relationships**
- DNS Associations:
- Linked to `194.107.199.104.bc.googleusercontent.com`.
- Network Peers:
- Same AS (Google Cloud) and subnet.
- No External Threat Links: No correlated IPs, certificates, or campaigns.
---
**5. Neighborhood Analysis**
- Subnet: 104.199.107.194/24
- Abuse Density: 0% (clean subnet).
- Neighbors: No active or malicious sibling IPs detected.
---
**6. Recommendations**
- Monitoring: No immediate action required.
- Validation: Verify geolocation anomalies via alternative probes.
- Context: This IP is part of Googleβs infrastructure; ensure no unauthorized access to associated cloud resources.
Conclusion: Legitimate Google Cloud IP with no malicious indicators. Low-risk, stable, and consistent behavior. No actionable threats detected.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGLE-CLOUD |
| CIDR Block | 104.196.0.0/14 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 194.107.199.104.bc.googleusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 194.107.199.104.bc.googleusercontent.com |
π DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | 1/4 domains |
| DMARC | 1/4 domains |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
| Domains Checked | 4 domains |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | β |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | kuberneteskubernetes.defaultkubernetes.default.svckubernetes.default.svc.cluster.local |
| Valid From | 2026-06-18T10:55:50+00:00 |
| Valid Until | 2031-06-17T10:57:50+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 1825 days |
| Serial Number | 10BF117869E0798AD1808182E997D50F |
| Thumbprint | C02685D8174EC5B6EA440FB8DB545BC2F5A2CBA9 |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 30% | 2 | 3 |
| ownership | 27% | 2 | 3 |
| reputation | 25% | 1 | 3 |
| geolocation | 24% | 2 | 3 |
| Overall | 24% | 10 | 17 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-05-29 05:54:09 UTC |
| Last Seen | 2026-06-29 06:05:07 UTC |
| Profile Built | 2026-06-29 06:12:31 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 46 |
Full dossier details are available via our API.