# 172.98.33.197 — IP Intelligence Summary

172.98.33.197 is an IPv4 address operated by Prefixx, Inc. (AS396356), geolocated to Dallas, United States. As of September 1, 2026, IPDebrief rates it Low Risk (0/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/172.98.33.197
- Last updated: 2026-09-01

## Ownership

- Organization: Prefixx, Inc.
- Network name: PFX-EXPRESSVPN
- Allocated block: 172.98.32.0/23
- ASN: AS396356 (https://ipdebrief.com/asn/396356)
- Regional registry: ARIN

## Location

- City: Dallas
- Region: TX
- Country: United States
- Time zone: America/Chicago

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (0/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\## IP Intelligence Briefing: 172.98.33.197/32

**Classification:** Low Risk | **Status:** No Active Threat Indicators

\---

\### Executive Summary

IP 172.98.33.197 is a residential/proxy endpoint operated by Prefixx, Inc. (ASN 396356) under the PFX-EXPRESSVPN CIDR block (172.98.32.0/23). Current threat assessment indicates **no malicious activity** detected. The IP is firewalled with no active services, and historical observations show zero threat persistence or ownership changes.

\---

\### Technical Profile

| Attribute | Value |

|-----------|-------|

| **Risk Score** | 0 / 100 |

| **Provider Score** | 0 |

| **Authority Score** | 0 |

| **Reputation** | Low Risk |

| **ASN** | 396356 |

| **Organization** | Prefixx, Inc. |

| **Network** | PFX-EXPRESSVPN |

| **Location** | United States (Texas/Dallas) |

| **DNSBL Listed** | 0 / 8 |

| **Tor Exit Node** | No |

| **Known Attacker** | No |

| **Spam Source** | No |

\---

\### Network Context

**Subnet Classification:** 172.98.33.0/24

\- **Total Siblings:** 107

\- **Active Siblings:** 53

\- **Threat Siblings:** 16 (15%)

\- **Abuse Density:** 0.1495

\- **Inherited Risk:** 5 / 100

The /24 subnet shows minimal abuse activity. Of 100 neighboring IPs sampled, only 1 exhibits medium risk, with 99 classified as low risk. The subnet is marked as "mostly_clean."

\---

\### Service & Behavioral Analysis

\- **Open Ports:** None detected

\- **Service Purpose:** Firewalled / No Services

\- **DNS Resolution:** No PTR records; no forward resolution

\- **Email Reputation:** Not configured (no SPF/DMARC)

\- **Traceroute:** 18 hops; transit via Comcast

\---

\### Historical Observations

Fourteen signals recorded as of 2026-07-28:

\- **Ownership Stability:** No changes detected

\- **Threat Persistence:** 0 days

\- **Recent Signals:** Subnet classification, traceroute path, ASN registration confirmed

\- **Status:** No persistent malicious activity observed

\---

\### Relationship Mapping

Three detected relationships all reference the same network entity (PFX-EXPRESSVPN). No external connections to:

\- Subnets (beyond immediate /24)

\- Hostnames

\- Organizations (beyond registered owner)

\- Certificates

\---

\### Recommended Actions

**Current Risk Level:** Minimal

\- **Firewall:** No blocking required; monitor for behavioral anomalies

\- **IDS/IPS:** Standard signatures apply; no custom rules needed

\- **WAF:** No specific rules required

\- **Threat Intel:** No correlation with active campaigns

**Monitoring Priority:** Low. IP shows standard residential/proxy characteristics without malicious indicators.

\---

**Report Generated:** IPDebrief Intelligence Platform

**Analysis Confidence:** High (comprehensive profile available)

## Nearby addresses

- 172.98.33.4 (https://ipdebrief.com/172.98.33.4)
- 172.98.33.5 (https://ipdebrief.com/172.98.33.5)
- 172.98.33.6 (https://ipdebrief.com/172.98.33.6)
- 172.98.33.7 (https://ipdebrief.com/172.98.33.7)
- 172.98.33.8 (https://ipdebrief.com/172.98.33.8)
- 172.98.33.9 (https://ipdebrief.com/172.98.33.9)
- 172.98.33.11 (https://ipdebrief.com/172.98.33.11)
- 172.98.33.12 (https://ipdebrief.com/172.98.33.12)
- 172.98.33.13 (https://ipdebrief.com/172.98.33.13)
- 172.98.33.14 (https://ipdebrief.com/172.98.33.14)
- 172.98.33.15 (https://ipdebrief.com/172.98.33.15)
- 172.98.33.16 (https://ipdebrief.com/172.98.33.16)

---

Source: IPDebrief, "172.98.33.197 IP intelligence", https://ipdebrief.com/172.98.33.197, updated 2026-09-01. Assessments are probabilistic.