IP Address: 209.85.220.101

ℹ️ Network Annotation: Google, and Google Cloud Platform (GCP)

This is (part of) the GCP public cloud. Some email protection services run in GCP, but it is also an attack/spam vector.

Last updated: 1/29/2026

This page shows DMARC authentication failure data for this IP address. Learn more about this data.

Geolocation Information

Country:: US United States
Coordinates:: 37.751, -97.822

WHOIS Information

Network Name:: GOOGLE
CIDR:: 209.85.128.0/17
Owner:: Google LLC
Org ID:: GOGL
Address:: 1600 Amphitheatre Parkway, Mountain View, CA 94043
Reverse DNS:: mail-sor-f101.google.com
Last updated: 2/5/2026

Analysis

This IP was first observed on October 29, 2024 and most recently on September 23, 2025. It has been associated with 13 failed authentication events affecting 30 messages, representing moderate activity. The IP belongs to GOOGLE (Google LLC), a cloud hosting provider with activity associated with United States. 4 other IPs in the same /24 subnet (209.85.220.*) also appear in this dataset.

Network Topology

Failures Detected from this IP

Showing 1-13 of 13 failures, affecting 30 messages

Date ▼	Messages
9/23/2025	2
9/9/2025	2
5/27/2025	1
5/1/2025	2
4/9/2025	4
3/27/2025	2
3/25/2025	2
3/18/2025	2
3/13/2025	2
3/11/2025	2
2/27/2025	2
2/25/2025	2
10/29/2024	5

External Reputation Lookups

Look up this IP in external threat intelligence and reputation databases (opens in new tab):

AbuseIPDB Cisco Talos Project Honey Pot GreyNoise VirusTotal Shodan Censys Spamhaus

Nearby IPs

Other IPs in the 209.85.220.0/24 range observed failing DMARC:

209.85.220.41 (367 failures), 209.85.220.69 (257 failures), 209.85.220.97 (43 failures), 209.85.220.65 (5 failures)