104.199.5.111📋 Copy

## INTELLIGENCE BRIEFING: 104.199.5.111/32

Classification: LOW RISK | Risk Score: 25 | Last Updated: Current Analysis

---

EXECUTIVE SUMMARY

IP address 104.199.5.111 is identified as a Google Cloud Platform infrastructure address with low-risk characteristics. No active threat indicators, attack campaigns, or malicious behavior detected. The IP operates within a clean subnet environment with no observed abuse density.

---

OWNERSHIP & INFRASTRUCTURE

• Organization: Google LLC (ASN: 396982)
• Network Classification: Google Cloud Platform / Cloud Computing Infrastructure
• Infrastructure Type: Cloud Compute with hosting capabilities
• Registration: ARIN (RIR)

GEOLOCATION DATA

• Primary Location: St. Ghislain, Walloon Region, Belgium (BE)
• Coordinates: 50.45°N, 3.82°E
• Timezone: Europe/Brussels
• Geolocation Consensus: Validated across multiple sources
• Network Prefix: 104.199.0.0/20

THREAT INDICATOR ANALYSIS

• Threat Indicators: None detected
• Blacklist Status: Not listed
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Campaign Associations: None
• Abuse Confidence Score: Not applicable

NETWORK ROLE & SERVICES

• Connection Type: Cloud infrastructure
• Service Status: Firewalled / No Active Services
• Open Ports: None detected
• TLS Certificate: None
• HTTP Title: None

DNS RESOLUTION

• PTR Hostname: 111.5.199.104.bc.googleusercontent.com
• Forward Resolution: 111.5.199.104.bc.googleusercontent.com (googleusercontent.com)
• Email Authentication: SPF: Yes, DMARC: Yes
• Forward Resolution Count: 1
• DNSSEC Valid: Yes
• CAA Records: Present

CONTROL PLANE DATA

• Route Stability: False (minor route changes in last 30 days)
• BGP Prefix: 104.199.0.0/20
• RPKI State: Not validated
• IRR Consistency: Not determined
• DNSBL Listings: 1 of 8 total lists

NEIGHBORHOOD ANALYSIS

• Subnet: 104.199.5.0/24
• Abuse Density: 0.0 (Clean)
• Total Sibling IPs: 2
• Active Siblings: 2
• Threat Siblings: 0
• Inherited Risk: 0
• Neighbor IP: 104.199.5.88 (Risk Score: 25, Authority Score: 90)

OBSERVATION HISTORY

• Total Observations: 25 signals tracked
• Recent Risk Trend: Stable/Minimal
• Threat Persistence: 0 days
• Ownership Changes: 0
• Key Historical Signals:

- ASN routing confirmed as GOOGLE-CLOUD-PLATFORM (US)

- Geolocation inference consistent with Belgian coordinates

- No significant risk escalations observed

RELATIONSHIP GRAPH

• Total Relationships: 233 entries
• Network Associations: Multiple GOOGLE-CLOUD network references
• DNS Associations: 111.5.199.104.bc.googleusercontent.com (Primary hostname)
• Organization Links: Google LLC infrastructure

---

SECURITY ACTIONS & RECOMMENDATIONS

Risk Assessment: LOW RISK

Recommended Action: Allow traffic with standard monitoring

No firewall rules or blocking recommendations are warranted at this time. The IP address demonstrates legitimate Google Cloud infrastructure behavior with no malicious activity indicators.

Monitoring Recommendations:

• Continue standard traffic monitoring
• No immediate blocking required
• Maintain baseline observation for infrastructure changes

---

ANALYST NOTES

This IP represents legitimate Google Cloud infrastructure with minimal risk profile. The geolocation data shows Belgian coordinates, though ASN registration indicates US-based infrastructure (common for cloud providers with global edge networks). No security incidents or threat indicators require immediate action.

Confidence Level: HIGH | Data Sources: IPDebrief Intelligence Platform

---

*This briefing contains IP intelligence data gathered from IPDebrief analysis. All data is factual and based on observed network signals.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.