8.231.222.25
# THREAT INTELLIGENCE BRIEFING
Target IP: 8.231.222.25/32
Classification: Google Cloud Infrastructure
Risk Assessment: LOW RISK
Analysis Date: July 30, 2026
---
## EXECUTIVE SUMMARY
IP 8.231.222.25 is identified as legitimate Google Cloud infrastructure with no malicious indicators. The IP belongs to Google LLC (AS396982) within the GOOGL-2 network block (8.228.0.0/14). All intelligence signals indicate benign cloud-hosted activity with a risk score of 0 and zero threat indicators.
---
## OWNERSHIP & INFRASTRUCTURE
| Attribute | Value |
|---|---|
| Organization | Google LLC |
| ASN | 396982 |
| Network | GOOGL-2 (8.228.0.0/14) |
| RIR | ARIN |
| Infrastructure Type | Cloud (Google Cloud) |
| Classification | Single-Service Host |
---
## GEOLOCATION
| Attribute | Value |
|---|---|
| Country | United States |
| State | Oregon |
| City | The Dalles |
| Coordinates | 45.6°N, 121.18°W |
| Timezone | America/Los_Angeles |
| Geo Consensus | True |
---
## THREAT INDICATORS
| Indicator | Status |
|---|---|
| Risk Score | 0 |
| Abuse Confidence Score | None |
| Blacklist Count | 0 |
| Is Tor Exit Node | False |
| Is Known Attacker | False |
| Is Spam Source | False |
| Threat Persistence Days | 0 |
| Is Persistently Malicious | False |
Threat Campaigns: None detected
Known Malware: None detected
Correlated Threat IPs: 0
---
## NETWORK SERVICES & PORTS
| Port | Protocol | Service | Banner |
|---|---|---|---|
| 22 | TCP | SSH | SSH-2.0-OpenSSH_10.0 |
TLS Certificate: Not present
HTTP Title: Not present
Certificate Authority: None detected
---
## DNS ANALYSIS
| Attribute | Value |
|---|---|
| PTR Hostname | 25.222.231.8.bc.googleusercontent.com |
| Forward Resolution | Confirmed |
| Hosted Domain | googleusercontent.com |
| Forward Hostnames | 25.222.231.8.bc.googleusercontent.com |
| Email Auth (SPF/DMARC) | Not present |
| DNSSEC Valid | True |
| CAA Records | Present |
---
## NEIGHBORHOOD ANALYSIS
| Metric | Value |
|---|---|
| Subnet | 8.231.222.25/24 |
| Abuse Density | 0.00% (Clean) |
| Threat Siblings | 0 |
| Active Siblings | 1 |
| Total Siblings | 1 |
| Overall Classification | Clean |
No malicious neighbors detected in the /24 subnet.
---
## OBSERVATION HISTORY (Last 19 Observations)
| Signal Type | Observation Date | Confidence | Status |
|---|---|---|---|
| Service Scanning | 2026-07-30 00:28:08 | 90% | SSH-2.0-OpenSSH_10.0 |
| Geolocation | 2026-07-30 00:28:01 | 56% | The Dalles, OR, US |
| Operator Score | 2026-07-30 00:25:37 | 60% | Basic (0.3478) |
| Subnet Abuse | 2026-07-30 00:30:01 | 40% | Clean (0.00% density) |
| Threat Indicators | 2026-07-30 00:32:36 | 30% | None detected |
Temporal Analysis: No ownership changes, zero threat persistence days. IP demonstrates consistent benign behavior throughout observation window.
---
## RELATIONSHIP GRAPH
| Relationship Type | Target |
|---|---|
| Same Network | GOOGL-2 |
| DNS Association | 25.222.231.8.bc.googleusercontent.com |
Total Relationships: 10 (5 network associations, 5 DNS associations)
---
## CONTROL PLANE DATA
| Metric | Value |
|---|---|
| BGP Prefix | 8.231.128.0/17 |
| Origin ASN | 396982 |
| Route Stability | Unstable |
| Route Changes (30d) | 0 |
| DNSBL Listed | 0/8 lists |
| Operator Score | 0.3478 (Basic) |
| RPKI State | Not evaluated |
| IRR Consistency | Not evaluated |
---
## RECOMMENDED ACTIONS
Firewall/Security Rules: None required. No blocking or filtering recommended based on current risk profile.
Monitoring: Standard monitoring sufficient. No elevated alerting required.
Investigation Priority: Low
---
## CONCLUSION
IP 8.231.222.25 represents legitimate Google Cloud infrastructure hosting a single-service endpoint (SSH access). All intelligence signals—ownership, geolocation, threat indicators, neighborhood analysis, and observation history—confirm benign, non-malicious activity. No action required beyond standard network monitoring.
---
Generated by: IPDebrief Intelligence Platform
Classification: Internal Threat Intelligence
Distribution: SOC Team
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Google LLC |
| ASN | AS396982 |
| Network Name | GOOGL-2 |
| CIDR Block | 8.228.0.0/14 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | 25.222.231.8.bc.googleusercontent.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | 25.222.231.8.bc.googleusercontent.com |
🔐 DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Single-Service Host |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
| SSH Version | SSH-2.0-OpenSSH_10.0 |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 31% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 30% | 2 | 3 |
| reputation | 28% | 1 | 3 |
| geolocation | 27% | 2 | 2 |
| Overall | 24% | 10 | 15 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (55%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-24 14:26:53 UTC |
| Last Seen | 2026-08-12 18:50:32 UTC |
| Profile Built | 2026-08-13 00:29:16 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 25 |
Full dossier details are available via our API.