8.230.11.105📋 Copy

IP INTELLIGENCE BRIEFING

Subject: IP 8.230.11.105/32

Classification: Moderate Risk - Google Cloud Infrastructure

Date: 2026-08-13

---

EXECUTIVE SUMMARY

IP 8.230.11.105 is a Google Cloud infrastructure endpoint registered under ASN 396982 (GOOGL-2). The address demonstrates a moderate risk score of 50 with no active threat indicators. The IP belongs to legitimate Google Cloud infrastructure operating from Seoul, South Korea, and is part of a clean subnet neighborhood.

---

OWNERSHIP AND GEOLOCATION

The IP address is owned by Google LLC (Organization: GOOGL-2, ASN: 396982) with CIDR block 8.228.0.0/14. Geolocation data confirms the endpoint is located in Seoul, South Korea, with a 2500 km accuracy radius. The IP is classified as Google Cloud infrastructure with proper DNSSEC validation enabled.

NETWORK CLASSIFICATION

The endpoint operates as a single-service host with SSH service (OpenSSH 9.6p1 Ubuntu-3ubuntu13.18) listening on port 22. The IP resolves to the reverse hostname 105.11.230.8.bc.googleusercontent.com, confirming legitimate Google Cloud infrastructure. No CDN, proxy, VPN, or hosting characteristics were detected.

THREAT ASSESSMENT

• Risk Score: 50 (Moderate)
• Abuse Confidence Score: Null
• Known Attacker: False
• Tor Exit Node: False
• Spam Source: False
• Blacklist Count: 0
• DNSBL Status: Listed on 2 of 8 threat feeds
• Threat Indicators: None detected
• Known Campaigns: None

NEIGHBORHOOD ANALYSIS

The /24 subnet (8.230.11.0/24) shows an abuse density of 0 and is classified as clean. No active sibling threats were detected. The subnet contains 1 total sibling IP with no active or threat-flagged neighbors.

OBSERVATION HISTORY

IPDebrief observed 22 signal observations for this address. The most recent observation occurred on 2026-08-13. No persistent malicious behavior was detected. Ownership remained stable with zero ownership changes. Threat observation count remains at zero throughout the observation period.

RELATIONSHIP GRAPH

The IP maintains relationships solely with:

• Same network: GOOGL-2 (repeated associations)
• DNS associations: 105.11.230.8.bc.googleusercontent.com

No external threat relationships or correlated malicious entities were identified.

RECOMMENDED ACTIONS

Based on the moderate risk classification and legitimate infrastructure status:

1. Allow traffic to/from 8.230.11.105 if not already permitted

2. Monitor SSH port 22 activity for anomalous connections

3. No blocking recommended at this time due to legitimate infrastructure status

---

Assessment: This IP represents legitimate Google Cloud infrastructure with no active threat indicators. The moderate risk score reflects standard operational monitoring thresholds rather than malicious behavior. No blocking or mitigation actions are required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.