216.73.160.145📋 Copy

# IP Intelligence Briefing: 216.73.160.145

## Executive Summary

IP address 216.73.160.145 is a low-risk address (score: 25) belonging to Prefixx, Inc. operating under the PFX-EXPRESSVPN network registration. The address is currently in a firewalled state with no active services detected. While no active threat indicators are present, the IP's VPN provider classification and geolocation inconsistencies warrant continued monitoring.

## Ownership and Network Classification

• Organization: Prefixx, Inc.
• ASN: 206092
• Network Name: PFX-EXPRESSVPN
• CIDR Block: 216.73.160.0/22
• Registration Authority: ARIN
• Abuse Contact: abuse-reports@vpnconsumer.com
• Network Role: Firewalled / No Services

## Geolocation Analysis

• Claimed Location: New York, US
• Inferred Location: Kansas, US (based on RTT analysis)
• Distance Discrepancy: 5,967.7 km (geolocation validation FAILED)
• RTT Consensus: Average 20ms, minimum possible 119.35ms for claimed distance
• Geo-Plausibility: False – claimed coordinates do not match network routing data

## Threat Intelligence Indicators

• Risk Score: 25 (Low Risk)
• Abuse Confidence Score: Not available
• Blacklist Count: 1 (out of 8 total DNSBL checks)
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Threat Persistence: 0 days (not persistently malicious)
• Active Campaigns: None detected

## Service and Port Analysis

• Open Ports: None detected
• TLS Certificate: None
• HTTP Service: None
• DNS Records: No PTR hostnames, no forward resolution
• Email Authentication: No SPF or DMARC records detected

## Historical Observations (16 Total)

Recent signal observations from 2026-07-29 indicate:

• Geolocation inconsistencies persist across multiple probes
• Ownership stability confirmed (0 changes)
• No threat persistence signals detected
• Network classification consistently identifies as non-VPN/non-proxy

## Neighborhood Assessment (/24 Subnet)

• Total Siblings: 70 IPs in 216.73.160.0/24
• Abuse Density: 0
• Risk Distribution:

- High Risk: 0

- Medium Risk: 4

- Low Risk: 66

• Inherited Risk: 0
• Threat Siblings: 0

## Network Relationships

All detected relationships link to the PFX-EXPRESSVPN network infrastructure. No associations with external organizations, hostnames, or certificates detected.

## Recommended Security Actions

Based on current risk profile (score 25), no specific firewall rules are recommended at this time. However, the following considerations apply:

1. Monitoring: The IP's VPN provider classification warrants baseline monitoring for anomalous activity patterns

2. Geolocation Anomaly: The claimed New York location conflicts with routing data (Kansas inference) – validate legitimate use case

3. DNSBL Listing: Single DNSBL listing present – review blacklist source for context

4. Network Context: No active services detected – address appears in passive/firewalled state

## Conclusion

IP 216.73.160.145 presents minimal immediate threat. The address belongs to a commercial VPN provider (Prefixx/ExpressVPN) and is currently in a firewalled state with no active services. Geolocation inconsistencies are noted but do not indicate active malicious behavior. Recommended approach: maintain monitoring without aggressive blocking. No immediate security actions required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.