172.98.33.82📋 Copy

# IP Intelligence Briefing: 172.98.33.82/32

Classification: Low Risk

Date: July 26, 2026

Analyst: IPDebrief Intelligence Team

---

## Executive Summary

IP 172.98.33.82 is assigned to Prefixx, Inc. (ASN: 396356) within the PFX-EXPRESSVPN netblock (172.98.32.0/23). The address maintains a low-risk profile with a risk score of 25/100. No active threat indicators were detected during the observation period. The IP shows no open services and is classified as "Firewalled / No Services."

---

## Ownership and Network Context

The IP resides within a /24 subnet (172.98.33.0/24) showing an abuse density of 0.1308 (13.08%), classified as "mostly_clean." Of 107 sibling addresses, 31 are active with 14 flagged as threats.

---

## Threat Assessment

Current Risk Score: 25 (Low)

Threat Indicators: None detected

• No known attacker associations
• No spam source classification
• No Tor exit node status
• Zero blacklist hits with confirmed evidence

Control Plane Status:

• Route stability: False
• DNSBL listings: 1 confirmed (high severity)
• Operator score: 0.1304 (Minimal)

---

## Service and Network Behavior

Services: No open ports detected. The IP shows no TLS certificates, HTTP banners, or active service signatures.

DNS Analysis:

• No PTR hostnames
• No forward resolution
• No hosted domains
• No SPF/DMARC records

Traceroute: 12 hops through Comcast and GTT transit networks with normal RTT characteristics.

---

## Historical Observations

Fourteen signal observations recorded. Key findings:

1. Geolocation Consensus: Multiple sources confirm US/Texas location with varying confidence (0.35–0.85)

2. Blacklist Activity: 1 of 8 DNSBL lists flagged the IP with high severity rating

3. Persistence: Zero ownership changes and zero threat persistence days recorded

4. Temporal Stability: No persistently malicious behavior observed

---

## Neighborhood Analysis

Subnet 172.98.33.0/24 exhibits:

• 100 sibling IPs analyzed
• Risk distribution: 99 low-risk, 1 medium-risk, 0 high-risk
• Abuse density: 0.0 (normalized)
• Inherited risk score: 5

Most neighbors maintain authority scores of 50, indicating established, non-malicious presence.

---

## Intelligence Conclusions

IP 172.98.33.82 represents a standard infrastructure address within the Prefixx, Inc. expression VPN network. The low risk score, absence of threat indicators, and "mostly_clean" subnet classification suggest legitimate operational use.

Actionable Intelligence:

• No immediate blocking recommended
• Monitor for changes in service status
• Be aware of 1 DNSBL listing requiring verification
• The subnet's 14 threat siblings warrant contextual awareness but do not indicate systemic compromise

---

Status: Monitor / No Action Required

Confidence: High (based on 14 observations)

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.