8.228.243.109📋 Copy

# IP Intelligence Briefing: 8.228.243.109/32

Date: 2026-08-06

Classification: Moderate Risk (Risk Score: 50)

Status: Active Monitoring

---

## Executive Summary

IP address 8.228.243.109 is a Google Cloud infrastructure host with moderate risk classification. The IP resolves to googleusercontent.com and exhibits characteristics consistent with legitimate cloud infrastructure. No active threat indicators were identified. The IP is associated with Google LLC (ASN 396982) and operates within a clean subnet environment.

---

## Ownership & Infrastructure Profile

---

## Network Services & DNS Analysis

DNS Resolution:

• PTR Hostname: 109.243.228.8.bc.googleusercontent.com
• Forward Resolution: googleusercontent.com (confirmed)
• Email Authentication: SPF and DMARC records present

Open Ports:

• Port 22 (SSH): Open with banner "SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.16"

TLS/HTTP:

• TLS Certificate: Not present
• HTTP Title: Not present
• No TLS cipher suite detected

Control Plane:

• BGP Prefix: 8.228.240.0/21
• Origin ASN: 396982
• Route Stable: No
• DNSSEC: Valid
• CAA Records: Present
• DNSBL Listings: 2 of 8 total lists

---

## Threat Intelligence Assessment

Threat Indicators:

• Abuse Confidence Score: Not applicable
• Blacklist Count: 0
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Known Campaigns: None

Risk Breakdown:

• Overall Risk Score: 50 (Moderate)
• Operator Score: 0.3478 (Basic)
• Authority Score: 0
• Stability Score: 0

---

## Neighborhood Analysis (8.228.243.0/24)

Notable Neighbor:

• IP: 8.228.243.55 | Risk Score: 25 | Authority Score: 90

---

## Temporal Analysis & History

Observation History:

• Total Observations: 17
• Most Recent: 2026-08-06
• Ownership Changes: 0
• Threat Persistence Days: 0
• Threat Observation Count: 0
• Persistently Malicious: No

Historical Signals:

• Ownership attribution consistently resolved to Google LLC
• No observed threat activity over monitoring period
• SSH service consistently detected

---

## Relationship Graph

Associated Entities:

• DNS Associations: 109.243.228.8.bc.googleusercontent.com (multiple entries)
• Network Associations: GOOGL-2

---

## Recommended Actions

Based on the risk profile, the following actions are recommended:

1. Traffic Classification: Treat as legitimate Google Cloud traffic

2. Firewall Rules: No blocking recommended; monitor SSH access patterns

3. Email Filtering: SPF/DMARC records present—allow mail from this domain

4. DNS Filtering: No blocking required; DNSSEC validation enabled

---

## SOC Analyst Notes

• This IP is part of Google's cloud infrastructure and resolves to legitimate googleusercontent.com services
• The moderate risk score (50) reflects infrastructure classification rather than malicious activity
• Clean subnet environment with no observed threat siblings
• SSH service exposure is typical for cloud infrastructure management interfaces
• No evidence of abuse, spam, or attack campaigns associated with this IP

Recommendation: Maintain current traffic policies. Monitor for any changes in behavior or service exposure.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.