8.228.36.90📋 Copy

# IP Intelligence Briefing: 8.228.36.90/32

## Executive Summary

Target IP 8.228.36.90 is a Google Cloud infrastructure endpoint with a low-risk profile (Risk Score: 25). No active threat indicators, malware, or abuse patterns were detected. The IP operates within Google's legitimate cloud compute infrastructure in London, GB, with no historical escalation in threat activity.

## Ownership and Infrastructure

• Organization: Google LLC
• ASN: 396982
• Location: London, England, United Kingdom (51.51°N, -0.13°W)
• Infrastructure Type: CloudCompute (Google Cloud)
• Network Classification: Provider network, hosting-enabled
• DNS: googleusercontent.com (90.36.228.8.bc.googleusercontent.com)

## Threat Assessment

• Overall Risk Score: 25 (Low Risk)
• Threat Indicators: None detected
• Blacklist Count: 0
• Known Attacker Status: No
• Tor Exit/Proxy/Spam Source: No
• Abuse Confidence Score: Not applicable
• Campaign Associations: None

## Network Neighborhood Analysis

• Subnet: 8.228.36.0/24 (8.228.36.90/24)
• Abuse Density: 0 (Clean)
• Threat Siblings: 0
• Active Siblings: 1 (the IP itself)
• Classification: Clean

## Operational Profile

• Open Ports: TCP/22 (SSH), TCP/8080 (HTTP-alt)
• SSH Version: OpenSSH_10.0
• Email Authentication: SPF and DMARC records present
• DNSSEC: Valid
• Reverse DNS: Resolves to googleusercontent.com hostname
• RTT Performance: Average 95.4ms from probe locations

## Historical Observations (25 signals analyzed)

• Observation Period: Multiple timestamps from June 2026
• Classification Stability: Consistent "Minimal" and "Basic" classifications
• Neighborhood Status: Remained "clean" throughout observation period
• Threat Persistence: 0 days (no persistent malicious activity)
• Ownership Changes: 0 (stable ownership)

## Relationship Graph

• Total Relationships: 61
• Primary Associations: Same Network (GOOGL-2), DNS Association (googleusercontent.com)
• Network Type: Standard Google Cloud infrastructure associations

## Security Recommendations

No immediate security actions recommended based on current risk profile. The IP operates within Google's legitimate cloud infrastructure with no evidence of abuse, malware distribution, or attack activity.

SOC Analyst Notes:

• This IP represents legitimate Google Cloud infrastructure
• No firewall rules or blocking recommended
• Monitor as standard cloud provider traffic
• Historical data indicates stable, low-risk operation

---

*Intelligence generated via IPDebrief® threat intelligence platform. Data reflects observations as of briefing date.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.