Is 64.202.191.109 Safe? IP Analysis Report

Suspicious Data Center/Web Hosting/Transit
United States US · Ashburn, Virginia · GoDaddy.com, LLC
High Abuse Score PTR Found 14 associated domains
0 Risk Score

Suspicious

Abuse Score 100% AbuseIPDB
Reports 5320 total
Reporters 0 users
Threat Feeds ?Number of threat intelligence databases (TOR, botnets, malware, phishing) in which this IP was found. 0 matched
Domains 14 associated
Share: Twitter Facebook LinkedIn
JSON CSV
Is this IP safe?
Key Findings
Overall Verdict
This IP address shows suspicious signals.
AbuseIPDB: 100% abuse confidence
5320 reports from 0 users
Threat Intelligence
No known threats detected
Analysis Sources
AbuseIPDB ?Community-driven IP abuse reporting platform with confidence scoring. Flagged
Confidence score: 100%
Threat Feeds ?Threat intelligence databases (TOR, botnets, malware, phishing) queried for this IP. Clean
0 matches
Geolocation Found
United States · Ashburn
Reverse DNS Found
ip-64-202-191-109.ip.secureserver.net
Summary
Verdict: Suspicious
United States (Ashburn)
GoDaddy.com, LLC
AbuseIPDB: 100%
No known threats
Analyze Another IP
Geolocation Information
Country United States US
City Ashburn, Virginia
ISP GoDaddy.com, LLC
Organization GoDaddy.com, LLC
ASN AS398101 GoDaddy.com, LLC
Network Details
ISP

GoDaddy.com, LLC

Organization

GoDaddy.com, LLC

ASN

AS398101 GoDaddy.com, LLC

AbuseIPDB Report
100%
Abuse Score
5320
Reports
0
Reporters
Data Center/Web Hosting/Transit
Assessment
Bad Reputation
This IP has been widely reported for abuse.

What is 64.202.191.109?

64.202.191.109 is an IP address that was analyzed by ScamSandbox. Based on our automated analysis, this IP address exhibits suspicious characteristics commonly associated with malicious activity.

The IP address 64.202.191.109 is located in Ashburn, United States and is operated by GoDaddy.com, LLC (AS398101 GoDaddy.com, LLC).

The reverse DNS (PTR) lookup for this IP address resolves to ip-64-202-191-109.ip.secureserver.net, which provides additional context about the infrastructure this IP belongs to.

According to the AbuseIPDB database, this IP address has an abuse confidence score of 100% with 5320 abuse reports. A confidence score above 50% indicates that this IP has been significantly reported for abusive activities, including spam, port scanning, brute force attacks, or other malicious behavior.

This IP address does not appear in any known threat intelligence feed, which is a positive indicator.

The overall risk score assigned to 64.202.191.109 by ScamSandbox is 40/100 (where 100 is the highest risk). This score is calculated by weighing signals from AbuseIPDB, threat intelligence feeds, geolocation data, reverse DNS, and community reports.

Security Provider Verdicts for 64.202.191.109

The table below shows the verdict from each security source checked during this analysis. A Flagged result means the source detected malicious or abusive activity. Clean means no threat was detected.

AbuseIPDB ?Community-driven IP abuse reporting platform with confidence scoring. Users worldwide report malicious IPs. IP address abuse reports database
Flagged (100%)
Threat Intelligence ?Aggregation of multiple threat databases (Emerging Threats, SANS DShield, Abuse.ch Feodo/URLhaus/SSL, PhishTank) to detect malicious IPs. Multi-source intelligence feeds (TOR, botnets, malware)
Clean
TOR Exit Node ?IP addresses of known TOR network exit nodes. TOR is used for anonymous browsing but also for malicious activities. TOR anonymization network check
Not TOR
Reverse DNS ?The PTR record maps an IP address to a domain name. Its absence may indicate a temporary or suspicious IP. PTR record and associated hostname
ip-64-202-191-109.ip.secureserver.net
ScamSandbox Overall Assessment
Suspicious (40/100)

What to do about 64.202.191.109?

If you have observed traffic from this IP address or it has attempted to connect to your systems, here are the recommended actions:

  1. Do not interact with this IP address — do not respond to suspicious requests or click on associated links.
  2. Block the IP in your firewall — add 64.202.191.109 to your blocklist (iptables, UFW, Windows Firewall, or your network firewall).
  3. Report the IP — submit a report on AbuseIPDB to help the community.
  4. Check your logs — review your server/firewall logs to identify any suspicious activity from this IP.
  5. Contact the hosting provider — if malicious activity persists, contact the ISP or hosting provider (GoDaddy.com, LLC) to report the abuse.

Frequently Asked Questions about 64.202.191.109

Based on our analysis, 64.202.191.109 is not considered safe. The IP address has been flagged as suspicious with a risk score of 40/100. We recommend blocking this IP.

The IP address 64.202.191.109 is managed by GoDaddy.com, LLC , with autonomous system number AS398101 GoDaddy.com, LLC. It is located in Ashburn, United States. The ISP is responsible for the IP address block that includes 64.202.191.109, but the end user controlling the server may be a customer of this ISP.

Based on our analysis, 64.202.191.109 is not identified as a TOR exit node. Traffic from this IP address originates directly from the server or device assigned to this IP, not from the TOR anonymization network.

Based on our analysis, 64.202.191.109 is not listed as a known threat in our threat intelligence feeds. This does not guarantee the IP is completely safe, however — new threats emerge constantly, and this IP address could be compromised in the future. Regularly check security reports and monitor your logs.

Community Reports

No community reports yet for 64.202.191.109. Be the first to share your experience.