IP Address: 209.85.208.172

ℹ️ Network Annotation: Google, and Google Cloud Platform (GCP)

This is (part of) the GCP public cloud. Some email protection services run in GCP, but it is also an attack/spam vector.

Last updated: 1/29/2026

This page shows DMARC authentication failure data for this IP address. Learn more about this data.

Geolocation Information

Country:: US United States
Coordinates:: 37.751, -97.822

WHOIS Information

Network Name:: GOOGLE
CIDR:: 209.85.128.0/17
Owner:: Google LLC
Org ID:: GOGL
Address:: 1600 Amphitheatre Parkway, Mountain View, CA 94043
Reverse DNS:: mail-lj1-f172.google.com
Last updated: 2/5/2026

Analysis

This IP was first observed on July 6, 2024 and most recently on November 1, 2024. It has been associated with 7 failed authentication events affecting 7 messages, representing moderate activity. The IP belongs to GOOGLE (Google LLC), a cloud hosting provider with activity associated with United States. 8 other IPs in the same /24 subnet (209.85.208.*) also appear in this dataset.

Network Topology

Failures Detected from this IP

Showing 1-7 of 7 failures, affecting 7 messages

Date ▼	Messages
11/1/2024	1
10/26/2024	1
10/22/2024	1
10/21/2024	1
10/20/2024	1
8/12/2024	1
7/6/2024	1

External Reputation Lookups

Look up this IP in external threat intelligence and reputation databases (opens in new tab):

AbuseIPDB Cisco Talos Project Honey Pot GreyNoise VirusTotal Shodan Censys Spamhaus

Nearby IPs

Other IPs in the 209.85.208.0/24 range observed failing DMARC:

209.85.208.181 (8 failures), 209.85.208.178 (8 failures), 209.85.208.180 (5 failures), 209.85.208.174 (5 failures), 209.85.208.177 (5 failures), 209.85.208.173 (4 failures), 209.85.208.169 (4 failures), 209.85.208.170 (3 failures)