Sh4mefulNetwork: GOOGL-2
This is (part of) the GCP public cloud. Some email protection services run in GCP, but it is also an attack/spam vector.
This page shows DMARC authentication failures originating from the GOOGL-2 network. Learn more about this data.
Analysis
This network has contributed 106 unique IP addresses across 107 failed authentication events, accounting for 181 messages. Activity spans from May 28, 2024 to July 8, 2026, with peak volume in November 2025 (17 events). The top countries by failure volume are United States (59%), The Netherlands (28%), Belgium (10%). The most active source IPs from this network include 34.6.252.197 (2 failures), 34.12.134.36 (2 failures), 34.78.5.147 (2 failures). Failures from GOOGL-2 (Google) span 5 countries with no dominant source, which is consistent with forwarding infrastructure, relay services, or broadly distributed automated activity.