8.229.196.106
## IP Intelligence Briefing: 8.229.196.106
Classification: Google Cloud Infrastructure | Risk Score: 25 (Low Risk)
Date: 2026-08-12 | Analyst: IPDebrief Intelligence
---
Executive Summary
IP 8.229.196.106 is a Google Cloud infrastructure endpoint classified as Low Risk (score: 25). The address is registered to Google LLC (AS396982) within the GOOGL-2 network block (8.228.0.0/14). While the IP shows legitimate cloud provider characteristics, it is listed on 1 of 8 DNS blacklist feeds with maximum severity rating of HIGH, warranting monitoring despite the low overall risk classification.
---
Network Profile
| Attribute | Value |
|---|---|
| ASN | 396982 (Google LLC) |
| Organization | Google LLC |
| Network Block | 8.228.0.0/14 |
| Location | The Dalles, OR, US (45.6°N, -121.18°W) |
| Timezone | America/Los_Angeles |
| Infrastructure Type | Cloud Compute |
| Service Purpose | Web Server |
---
Threat Assessment
Indicators:
- No known attack campaigns correlated
- Not identified as Tor exit node, proxy, or VPN
- Not classified as known attacker or spam source
- No evidence of persistent malicious activity
Blacklist Status:
- Listed: 1 of 8 DNSBL feeds
- Maximum Severity: HIGH
- Operator Score: 0.3478 (Basic)
- RPKI State: Validated
---
Technical Observations
DNS Resolution:
- PTR Hostname: 106.196.229.8.bc.googleusercontent.com
- Forward Resolution: Confirmed
- Email Authentication: SPF and DMARC configured
Network Services:
- TCP/443 (HTTPS) - Active
- TLS Certificate: Present (issuer: CN=e336e65d-dad3-425b-a5b6-052d460cbf32)
Control Plane:
- Route Stability: Concerns detected (not route stable)
- BGP Prefix: 8.229.0.0/16
- Delegation Age: Unknown
---
Historical Signals (25 Observations)
Recent activity includes:
- Multiple geolocation confirmations (The Dalles, OR, US)
- Connection failures observed on HTTPS probes
- Blacklist listings detected with high severity
- ICMP validation blocked (unable to validate geolocation)
---
Subnet Analysis (8.229.196.0/24)
| Metric | Value |
|---|---|
| Abuse Density | 0% |
| Subnet Classification | Clean |
| Total Siblings | 2 |
| Active Siblings | 2 |
| Threat Siblings | 0 |
Neighbor IP: 8.229.196.6 (Risk Score: 25, Authority Score: 90)
---
Relationship Graph
- DNS Associations: Multiple entries pointing to 106.196.229.8.bc.googleusercontent.com
- Network Associations: Repeated links to GOOGL-2 network block
- No external organization or certificate relationships detected
---
Recommended Actions
No specific firewall rules or blocking recommended. The IP demonstrates legitimate cloud provider characteristics with no persistent malicious indicators. However, the HIGH-severity blacklist listing warrants the following:
1. Monitor for any behavioral anomalies or traffic spikes from this address
2. Verify blacklist listing source and relevance to your threat landscape
3. Correlate with other indicators in your security operations center
---
Status: Low Risk - Cloud Infrastructure
Last Updated: 2026-08-12
Source: IPDebrief Intelligence Platform
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 8.228.0.0/14 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 106.196.229.8.bc.googleusercontent.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | 106.196.229.8.bc.googleusercontent.com |
🔐 DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | 1/4 domains |
| DMARC | 1/4 domains |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
| Domains Checked | 4 domains |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | kuberneteskubernetes.defaultkubernetes.default.svckubernetes.default.svc.cluster.local |
| Valid From | 2026-07-31T22:35:26+00:00 |
| Valid Until | 2031-07-30T22:37:26+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_128_GCM_SHA256 |
| Signature Algorithm | sha256RSA |
| Validity Period | 1825 days |
| Serial Number | 63E7D27054A636B565279CD97C4B4B30 |
| Thumbprint | 0C180916D27CD38A6BF75B32134DF71557930640 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 19% | 2 | 2 |
| routing | 13% | 1 | 1 |
| services | 21% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 17% | 1 | 1 |
| geolocation | 13% | 1 | 1 |
| Overall | 18% | 9 | 10 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-23 20:06:22 UTC |
| Last Seen | 2026-08-12 18:13:58 UTC |
| Profile Built | 2026-08-12 18:23:31 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 26 |
Full dossier details are available via our API.