35.247.119.238
IP Risk Score: 100 / 100
This IP is considered potentially malicious and poses a serious security threat. Activity from this IP is consistent with active and malicious behavior. This assessment is backed by strong and consistent detection signals. The IP represents a severe and confirmed security risk. Immediate blocking or mitigation is strongly recommended.
What is this IP address?
United States (US)
Conf. level: 100 / 100
Properties
Observed Client Profile
- OS: Windows (100%)
- Device Type: Desktop (100%)
- Browser Family: Chrome (100%)
- Rendering Engine: Gecko (100%)
Behavioral Indicators
The IP address exhibits highly suspicious behavior with multiple requests to non-existent resources, all resulting in 404 errors. The traffic is concentrated within a very short time frame, indicating potential automated scraping activity. The absence of JavaScript support further suggests bot-like behavior, and the high number of honeypot hits raises significant concerns about malicious intent.
The supernet (35.247.0.0/16), which this IP belongs to, exhibits coordinated behavior with multiple IPs making repetitive, low-interaction requests to the same target, suggesting potential automated scraping or bot activity. Despite the legitimate RDNS and forward DNS matches indicating they belong to Google Cloud, the high frequency of identical requests across different IPs raises concerns about possible misuse of the infrastructure.
JavaScript Support
⚠️ NoUser-Agent Samples
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36
IP Location
Region: Oregon, United States
City: The Dalles
Local time: 2026-06-21 23:37:14