216.73.161.106📋 Copy

## IPDEBRIEF INTELLIGENCE BRIEFING

Target: 216.73.161.106/32

Classification: Low Risk – Defensable

Date: Current Intelligence Cycle

---

EXECUTIVE SUMMARY

IP 216.73.161.106 is assigned to Prefixx, Inc. (AS206092) under the PFX-EXPRESSVPN network. Current risk assessment indicates low-risk profile with no active threat indicators. The IP is geolocated to New York, NY, USA and shows no malicious activity in recent observation history.

---

OWNERSHIP & INFRASTRUCTURE

• Organization: Prefixx, Inc.
• ASN: 206092 (security firewall ltd)
• Network Name: PFX-EXPRESSVPN
• CIDR Block: 216.73.160.0/22
• RIR: ARIN
• Geolocation: New York, NY, US (40.72°N, 74°W)
• Timezone: America/New_York

---

THREAT ASSESSMENT

Threat Indicators: None detected. No known campaigns, no reputation sources flagged, no spam or attacker associations.

---

NETWORK BEHAVIOR

• Service Purpose: Firewalled / No Services
• Open Ports: None
• DNS Records: No PTR records, no forward resolution
• Email Reputation: No SPF/DMARC configured
• HTTP/HTTPS: No web services detected
• TLS Certificates: None
• DNSSEC: Valid

---

NEIGHBORHOOD ANALYSIS (216.73.161.0/24)

• Total Siblings: 54
• Active Siblings: 12
• Threat Siblings: 0
• Abuse Density: 0
• Risk Distribution: High (0) / Medium (2) / Low (51)

Notable Neighbors:

• 216.73.161.80 (Risk: 25, Authority: 50)
• 216.73.161.94 (Risk: 25, Authority: 50)

---

OBSERVATION HISTORY (14 Records)

Recent signal observations (2026-07-29):

• Geolocation: New York, NY, US (confidence 0.70)
• RTT Anomaly: Observed RTT 16.0ms < minimum possible 119.4ms for 5,968km distance (confidence 0.30)
• Subnet Classification: Clean (abuse density 0)
• Ownership Stability: No changes detected
• Threat Persistence: Not persistently malicious
• AlienVault OTX: ASN flagged with 4 pulses (details nested)

---

CONTROL PLANE

• BGP Prefix: 216.73.160.0/23
• Origin ASN: 206092
• Route Changes (30d): 0
• Route Stable: False
• MOAS: False
• DNSBL Listed: 0/8 lists
• Operator Score: 0.1304 (Minimal)
• RPKI/Irr: Consistency data unavailable

---

RELATIONSHIPS

• Same Network: PFX-EXPRESSVPN (2 relationships)

---

RECOMMENDATIONS

No immediate security actions required. The IP demonstrates a low-risk profile with:

• No active threat indicators
• No open services
• No malicious associations
• Clean neighborhood metrics

SOC Action: Monitor for service activation. Current firewall rules remain appropriate.

---

Data Sources: IPDebrief Intelligence Platform

Intel Cycle: Current

Classification: Standard

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.