# 172.98.33.82 — IP Intelligence Summary

172.98.33.82 is an IPv4 address operated by Prefixx, Inc. (AS396356), geolocated to Dallas, United States. As of September 5, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/172.98.33.82
- Last updated: 2026-09-05

## Ownership

- Organization: Prefixx, Inc.
- Network name: PFX-EXPRESSVPN
- Allocated block: 172.98.32.0/23
- ASN: AS396356 (https://ipdebrief.com/asn/396356)
- Regional registry: ARIN

## Location

- City: Dallas
- Region: Texas
- Country: United States
- Time zone: —

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\# IP Intelligence Briefing: 172.98.33.82/32

**Classification:** Low Risk

**Date:** July 26, 2026

**Analyst:** IPDebrief Intelligence Team

\---

\## Executive Summary

IP 172.98.33.82 is assigned to Prefixx, Inc. (ASN: 396356) within the PFX-EXPRESSVPN netblock (172.98.32.0/23). The address maintains a low-risk profile with a risk score of 25/100. No active threat indicators were detected during the observation period. The IP shows no open services and is classified as "Firewalled / No Services."

\---

\## Ownership and Network Context

| Attribute | Value |

|-----------|-------|

| ASN | 396356 |

| Organization | Prefixx, Inc. |

| Netname | PFX-EXPRESSVPN |

| CIDR Block | 172.98.32.0/23 |

| RIR | ARIN |

| Geolocation | Dallas, Texas, United States |

The IP resides within a /24 subnet (172.98.33.0/24) showing an abuse density of 0.1308 (13.08%), classified as "mostly_clean." Of 107 sibling addresses, 31 are active with 14 flagged as threats.

\---

\## Threat Assessment

**Current Risk Score:** 25 (Low)

**Threat Indicators:** None detected

\- No known attacker associations

\- No spam source classification

\- No Tor exit node status

\- Zero blacklist hits with confirmed evidence

**Control Plane Status:**

\- Route stability: False

\- DNSBL listings: 1 confirmed (high severity)

\- Operator score: 0.1304 (Minimal)

\---

\## Service and Network Behavior

**Services:** No open ports detected. The IP shows no TLS certificates, HTTP banners, or active service signatures.

**DNS Analysis:**

\- No PTR hostnames

\- No forward resolution

\- No hosted domains

\- No SPF/DMARC records

**Traceroute:** 12 hops through Comcast and GTT transit networks with normal RTT characteristics.

\---

\## Historical Observations

Fourteen signal observations recorded. Key findings:

1. **Geolocation Consensus:** Multiple sources confirm US/Texas location with varying confidence (0.35–0.85)

2. **Blacklist Activity:** 1 of 8 DNSBL lists flagged the IP with high severity rating

3. **Persistence:** Zero ownership changes and zero threat persistence days recorded

4. **Temporal Stability:** No persistently malicious behavior observed

\---

\## Neighborhood Analysis

Subnet 172.98.33.0/24 exhibits:

\- 100 sibling IPs analyzed

\- Risk distribution: 99 low-risk, 1 medium-risk, 0 high-risk

\- Abuse density: 0.0 (normalized)

\- Inherited risk score: 5

Most neighbors maintain authority scores of 50, indicating established, non-malicious presence.

\---

\## Intelligence Conclusions

IP 172.98.33.82 represents a standard infrastructure address within the Prefixx, Inc. expression VPN network. The low risk score, absence of threat indicators, and "mostly_clean" subnet classification suggest legitimate operational use.

**Actionable Intelligence:**

\- No immediate blocking recommended

\- Monitor for changes in service status

\- Be aware of 1 DNSBL listing requiring verification

\- The subnet's 14 threat siblings warrant contextual awareness but do not indicate systemic compromise

\---

**Status:** Monitor / No Action Required

**Confidence:** High (based on 14 observations)

## Nearby addresses

- 172.98.33.4 (https://ipdebrief.com/172.98.33.4)
- 172.98.33.5 (https://ipdebrief.com/172.98.33.5)
- 172.98.33.6 (https://ipdebrief.com/172.98.33.6)
- 172.98.33.7 (https://ipdebrief.com/172.98.33.7)
- 172.98.33.8 (https://ipdebrief.com/172.98.33.8)
- 172.98.33.9 (https://ipdebrief.com/172.98.33.9)
- 172.98.33.11 (https://ipdebrief.com/172.98.33.11)
- 172.98.33.12 (https://ipdebrief.com/172.98.33.12)
- 172.98.33.13 (https://ipdebrief.com/172.98.33.13)
- 172.98.33.14 (https://ipdebrief.com/172.98.33.14)
- 172.98.33.15 (https://ipdebrief.com/172.98.33.15)
- 172.98.33.16 (https://ipdebrief.com/172.98.33.16)

---

Source: IPDebrief, "172.98.33.82 IP intelligence", https://ipdebrief.com/172.98.33.82, updated 2026-09-05. Assessments are probabilistic.