Autonomous system
AS396982 GOOGLE-CLOUD-PLATFORM
Unclassified ARIN
Summary
Google Cloud Platform
cloud hosting compute
Google Cloud Platform (GOOGLE-CLOUD-PLATFORM) — the ASN that carries customer
workloads on GCP, as opposed to Google's own consumer products.
What it's used for
- Hosting third-party applications, APIs, and services running on Google Cloud (Compute Engine, GKE, Cloud Run, load balancers, etc.).
Notable
- Distinct from AS15169 (Google's own Search/YouTube/Gmail network): an IP here means a GCP customer, which could be anyone who deployed on Google Cloud.
- Google publishes its Cloud IP ranges so firewalls can identify GCP egress.
Interesting
- Separating first-party (AS15169) from customer cloud (AS396982) is why a GCP- hosted site's IP looks different from a google.com IP.
This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.
Address space
Summary
| Country | Name | Prefixes |
|---|---|---|
| US | United States of America | 940 |
Registry
Allocation record
- Registry
- ARIN
- Handle
AS396982- Registry name
- GOOGLE-CLOUD-PLATFORM
- Registrant
- Google LLC
- Abuse contact
- google-cloud-compliance@google.com
- Registered
- 2018-08-15
- Last changed
- 2021-11-16
- Status
- active
Reputation
Classification and threat
Unclassified Not in the curated lists. Most of the ~80,000 allocated ASNs are not.
2 IC3 indicators addresses in this network appear in FBI IC3 cybersecurity advisories.
| Prefix | Advisory | Published |
|---|---|---|
34.86.51.128 | Cyber Criminal Groups UNC6040 and UNC6395 Compromising Salesforce Instances for Data Theft and Extortion | 2025-09-12 |
35.186.181.1 | Cyber Criminal Groups UNC6040 and UNC6395 Compromising Salesforce Instances for Data Theft and Extortion | 2025-09-12 |
Threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.
Elsewhere