172.98.33.84
172.98.33.84 is an IPv4 address operated by Prefixx, Inc. (AS396356), geolocated to Dallas, United States. As of September 2, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.
# IP INTELLIGENCE BRIEFING
Target: 172.98.33.84/32
Classification: Low Risk
Date: Current Intelligence Cycle
---
## EXECUTIVE SUMMARY
IP 172.98.33.84 presents as a low-risk endpoint with no active threat indicators. The address shows no evidence of malicious activity, open services, or blacklist associations. The surrounding subnet exhibits moderate baseline activity with minimal threat concentration.
---
## RISK PROFILE
| Metric | Value |
|---|---|
| **Overall Risk Score** | 0 (Low Risk) |
| **Provider Score** | 0 |
| **Authority Score** | 0 |
| **Abuse Confidence** | Not Applicable |
| **Blacklist Count** | 0 |
| **Reputation** | Low Risk |
Assessment: The IP demonstrates clean standing across all evaluated security dimensions.
---
## GEOLOCATION & NETWORK CLASSIFICATION
- Country: United States
- Region: Texas
- City: Dallas
- ASN: 396356
- BGP Prefix: 172.98.33.0/24
- Network Role: Firewalled / No Services
- DNSSEC Status: Valid
- Route Stability: Inactive
Note: The address resolves within the 172.16.0.0/12 private address space. Geolocation data indicates Dallas, Texas with 2,500km accuracy radius.
---
## SERVICE & DNS ANALYSIS
Open Services: None detected
- Open Ports: 0
- HTTP Services: None
- TLS Certificates: 0
- Hosted Domains: 0
DNS Resolution:
- PTR Hostnames: None
- Forward Resolution: Not confirmed
- Email Authentication: No SPF/DMARC records
- DNSBL Listings: 0/8 lists
---
## THREAT INDICATORS
| Indicator | Status |
|---|---|
| Tor Exit Node | No |
| Known Attacker | No |
| Spam Source | No |
| Campaign Association | None |
| Honeypot Hits | 0 |
| Enumeration Strikes | 0 |
| WAF Violations | 0 |
Active Threat Indicators: None
Total Threat Observations: 0
Threat Persistence: None
---
## SUBNET NEIGHBORHOOD ANALYSIS
Subnet: 172.98.33.0/24
| Metric | Value |
|---|---|
| Total Siblings | 107 |
| Active Siblings | 31 |
| Threat Siblings | 14 |
| Abuse Density | 13.08% |
| Classification | Mostly Clean |
| Risk Distribution | 0 High / 1 Medium / 99 Low |
Inherited Risk Score: 5
Analysis: The subnet exhibits typical baseline activity with 14 threat siblings out of 107 total addresses. The target IP shows no inherited risk patterns.
---
## OBSERVATION HISTORY
Total Observations: 10 signals tracked
Recent Activity:
- 2026-07-26 15:59:08: US geolocation signal (Texas)
- 2026-07-26 15:58:58: Dallas, Texas confirmation
- 2026-07-26 15:58:51: Certificate scan (0 certificates)
- 2026-07-26 15:58:41: Subnet classification signal
- 2026-07-26 15:57:46: DNSBL scan (0 listings)
Temporal Analysis: No ownership changes detected. No persistent malicious behavior observed over the observation window.
---
## RELATIONSHIP GRAPH
Associated Entities: None detected
Related Hostnames: 0
Related Organizations: 0
Related Certificates: 0
---
## RECOMMENDED ACTIONS
Current Risk Level: LOW
Recommended Security Actions:
- No immediate firewall rules required
- No blocking recommendations
- Standard monitoring protocols applicable
Firewall Configuration: None required for this IP address.
---
## INTELLIGENCE CONCLUSION
IP 172.98.33.84/32 demonstrates a clean security profile with zero risk indicators. The address is associated with the 172.98.33.0/24 subnet which shows minimal threat concentration. No defensive actions are required at this time.
SOC Analyst Guidance: Monitor as part of standard operational procedures. No immediate escalation or blocking necessary.
---
*Report generated by IPDebrief Intelligence Platform*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Prefixx, Inc. |
| ASN | AS396356 |
| Network Name | PFX-EXPRESSVPN |
| CIDR Block | 172.98.32.0/23 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS396356 |
| Network Prefix | 172.98.33.0/24 |
| Route mapping | Found |
| Certificates in transparency logs | 0 certificates |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 0% | 0 | 0 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 8% | 2 | 2 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-11 02:17:58 UTC |
| Last Seen | 2026-10-06 10:29:23 UTC |
| Profile Built | 2026-09-02 14:40:08 UTC |
| Data Freshness | Live |
| Signal Types | 18 |
| Total Observations | 21 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 172.98.33.84
Who owns the IP address 172.98.33.84?
172.98.33.84 is registered to Prefixx, Inc.. The address falls within the 172.98.32.0/23 network block. Registration is held at ARIN.
Where is 172.98.33.84 located?
Geolocation data places 172.98.33.84 in Dallas, Texas, United States. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 172.98.33.84 malicious or safe?
172.98.33.84 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.