# IP Intelligence Briefing: 8.229.172.118
Date: 2026-07-30
Status: LOW RISK
Risk Score: 15/100
---
## Executive Summary
IP 8.229.172.118 is a low-risk address owned by Google LLC, part of the GOOGL-2 cloud infrastructure network (8.228.0.0/14). The IP is geolocated to The Dalles, Oregon, US, and operates within Google Cloud provider infrastructure. No active threat indicators, open services, or malicious behavior observed. Recommended action: Allow traffic with standard logging.
---
## Technical Profile
| Attribute | Value |
|---|---|
| **Organization** | Google LLC (ASN 396982) |
| **Network Block** | 8.228.0.0/14 (GOOGL-2) |
| **Geolocation** | The Dalles, OR, US (Lat: 45.60, Lon: -121.18) |
| **Infrastructure Type** | Google Cloud Platform |
| **Risk Score** | 15 (Low) |
| **Abuse Confidence** | Not applicable |
| **Blacklist Count** | 0 |
---
## Threat Assessment
Threat Indicators: None detected
- Not classified as known attacker
- Not a spam source
- Not a Tor exit node
- No active threat feeds associated
- Zero blacklist enumerations
Service Exposure: None
- No open ports detected
- No TLS certificates or HTTP services responding
- No banner information or server fingerprints available
Control Plane Signals:
- DNSBL Listed: 1/8 lists
- RPKI State: Not available
- Route Stability: Unstable (0 route changes in 30 days)
- DNSSEC: Valid
---
## Historical Analysis (15 Observations)
Recent signal history from 2026-07-30 confirms:
- Consistent geolocation to The Dalles, OR, US
- Persistent Google LLC ownership attribution
- Multiple confidence-level signals for ASN and RIR data
- No threat escalation or behavioral changes detected
The IP demonstrates stable ownership and infrastructure characteristics with no evidence of malicious activity over the observation period.
---
## Relationship Graph
DNS Associations:
- 118.172.229.8.bc.googleusercontent.com
Network Associations:
- GOOGL-2 (8.228.0.0/14)
No external organizational or campaign-level relationships identified.
---
## Neighborhood Analysis (/24: 8.229.172.0.0/24)
Abuse Density: 0%
Subnet Classification: Low Risk
Neighbor IP: 8.229.172.91
- Risk Score: 25 (Low-Moderate)
- Authority Score: 90
The /24 subnet exhibits minimal abuse activity with only one neighboring IP showing elevated risk. The target IP 8.229.172.118 maintains a risk profile independent of adjacent addresses.
---
## Recommended Actions
1. Firewall: Allow traffic with standard logging. No blocking required.
2. Monitoring: No special monitoring required for this IP.
3. Threat Intelligence: No indicators for IOC feeds or threat sharing platforms.
4. Blocklist Status: Not recommended for inclusion in threat blocklists.
---
Classification: LEGITIMATE INFRASTRUCTURE
Confidence Level: HIGH
Source: IPDebrief Intelligence Platform
*This briefing is based on automated analysis of IP 8.229.172.118. SOC analysts should correlate with local telemetry for operational decision-making.*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 8.228.0.0/14 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | 118.172.229.8.bc.googleusercontent.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | 118.172.229.8.bc.googleusercontent.com |
π DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Single-Service Host |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
| SSH Version | SSH-2.0-OpenSSH_9.6p1 r4 |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 23% | 10 | 15 |
| Data Coherence | Mixed Signals (65%) β 2 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
β High authority score (90) but appears on threat lists (risk 40)
π Observation Timeline π Live
| First Seen | 2026-07-27 09:39:47 UTC |
| Last Seen | 2026-08-12 21:31:25 UTC |
| Profile Built | 2026-08-12 21:59:56 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 29 |
Full dossier details are available via our API.