104.199.76.230📋 Copy

## IP Intelligence Briefing: 104.199.76.230/32

Classification: Low Risk | Risk Score: 25/100 | Report Date: Current

Executive Summary

The IP address 104.199.76.230 operates within the Google Cloud infrastructure and presents a low-risk profile. The address resolves to Google User Content domain infrastructure in New York, US. No active malicious indicators were observed, though the IP appears in one of eight monitored DNSBL lists. The IP exhibits no open services and maintains a stable ownership record with Google LLC.

Technical Profile

• Infrastructure: Google Cloud Platform (AS396982)
• Geolocation: United States, New York (US-NY)
• BGP Prefix: 104.199.72.0/21
• DNS Resolution: 230.76.199.104.bc.googleusercontent.com
• Network Role: Firewalled / No Services
• Cloud Status: Cloud infrastructure detected

Threat Indicators

• Blacklist Status: Listed on 1 of 8 DNSBL feeds
• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Abuse Confidence Score: Not applicable
• Campaign Correlation: No correlated IPs or certificate matches

Network Context

The IP operates in isolation within its /24 subnet with zero neighbor IPs detected. Neighborhood abuse density registers at 0. No threat siblings were identified in the vicinity. The control plane shows the address as part of a stable BGP deployment with no recent route changes.

Behavioral Observations

• Service Status: No open ports detected; service enumeration unsuccessful
• TLS/Certificate: No TLS certificate observed
• Honeypot Interaction: No strikes recorded
• WAF Violations: None observed
• Ownership Stability: No ownership changes recorded

Historical Activity

Fourteen total observations recorded as of June 22, 2026. The address maintains consistent Google LLC ownership with stable geolocation data. Recent observations confirm DNSSEC validation and CAA record presence.

Security Actions

Based on the low-risk profile and Google Cloud infrastructure classification, standard monitoring is recommended. The IP does not require aggressive blocking. If the DNSBL listing is confirmed as a false positive or requires attention, review the specific blacklist source. No firewall rules are recommended at this time.

---

*Report generated from IPDebrief intelligence data. All findings based on observed network signals and threat intelligence feeds.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.