Malicious googleusercontent on London IP...

See: https://www.abuseipdb.com/check/35.203.210.238

Re: https://www.shodan.io/host/35.203.210.238 & https://www.virustotal.com/gui/url/437dc0d332a580875e8d986a886ba4e3a8e78232264a3d19c761d05a2b102506/detection

polonus

For London one could use this: https://gcloud-compute.com/grid.html?region=europe-west2 with the Instance Picker.
See: https://gcloud-compute.com/europe-west2.html

polonus