IPDEBRIEF INTELLIGENCE BRIEFING
Target IP: 8.228.121.28/32
Classification: LEGITIMATE INFRASTRUCTURE — LOW RISK
Risk Score: 0/100
Last Updated: 2026-07-27
---
Executive Summary
IP 8.228.121.28 is a Google Cloud Platform infrastructure address with no malicious indicators. The address resolves to legitimate Google Cloud infrastructure in Ashburn, VA and presents minimal threat. No security action required; standard monitoring sufficient.
---
Ownership & Infrastructure Profile
| Attribute | Value |
|---|---|
| **Organization** | Google LLC |
| **ASN** | 396982 (GOOGL-2) |
| **CIDR Block** | 8.228.0.0/14 |
| **Geolocation** | Ashburn, Virginia, US |
| **Infrastructure Type** | Google Cloud Provider |
| **Network Role** | Firewalled / No Services |
Key Indicators:
- Reverse DNS resolves to `28.121.228.8.bc.googleusercontent.com`
- Forward DNS resolution confirmed
- DNSSEC validated
- No open ports detected (firewalled infrastructure)
- No TLS certificates or HTTP services exposed
---
Threat Assessment
Threat Indicators: None
- Abuse Confidence Score: Not applicable
- Blacklist Count: 0
- Known Campaigns: None
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
Behavioral Signals:
- Historical observations: 23 total
- Threat observation count: 1 (minimal)
- Persistent malicious activity: No
- Route stability: Unstable (BGP route changes detected in 30-day window)
---
Neighborhood Analysis
Subnet: 8.228.121.28/24
- Abuse Density: 0 (clean)
- Classification: Mostly clean
- Total Siblings: 2
- Active Siblings: 1
Notable Neighbor: 8.228.121.217
- Risk Score: 25 (low)
- Authority Score: 90 (legitimate provider infrastructure)
No high or medium-risk neighbors detected in the /24 subnet.
---
Relationships
The IP maintains associations with:
- GOOGL-2 network (multiple relationships)
- Hostname: 28.121.228.8.bc.googleusercontent.com
All relationships indicate legitimate Google Cloud infrastructure infrastructure.
---
Recommended Actions
No action required. This IP represents legitimate cloud infrastructure with no threat indicators.
If firewall rules are needed for compliance:
```
# Allow (default behavior - no block recommended)
# No firewall rules required
```
Monitoring Recommendations:
- Standard monitoring for Google Cloud traffic
- No additional scrutiny needed
- No IP blocking or allowlisting required
---
Analyst Notes: This address is part of Google Cloud's infrastructure and should be treated as legitimate. The low-risk classification (score: 0) and zero abuse density in the neighborhood support continued permissive handling. No correlation with malicious campaigns or threat actors observed.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 8.228.0.0/14 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 28.121.228.8.bc.googleusercontent.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | 28.121.228.8.bc.googleusercontent.com |
🔐 DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS396982 |
| Network Prefix | 8.228.64.0/18 |
| Route mapping | Found |
| Certificates in transparency logs | 0 certificates |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 22% | 1 | 3 |
| geolocation | 27% | 2 | 3 |
| Overall | 22% | 10 | 16 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-13 21:32:50 UTC |
| Last Seen | 2026-09-01 00:52:45 UTC |
| Profile Built | 2026-08-29 11:55:45 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 26 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 8.228.121.28
Who owns the IP address 8.228.121.28?
8.228.121.28 is registered to Google LLC. The address falls within the 8.228.0.0/14 network block. Registration is held at ARIN.
Where is 8.228.121.28 located?
Geolocation data places 8.228.121.28 in Ashburn, VA, United States. The local time zone is America/New_York. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 8.228.121.28 malicious or safe?
8.228.121.28 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 8.228.121.28?
The reverse DNS (PTR) record for 8.228.121.28 is 28.121.228.8.bc.googleusercontent.com. This hostname is forward-confirmed, meaning it resolves back to the same address.
Is 8.228.121.28 a VPN, proxy, or data center address?
8.228.121.28 is classified as cloud infrastructure and hosting infrastructure based on network ownership and behavioural analysis.