# IP Intelligence Briefing: 216.73.161.107/32
## Executive Summary
IP 216.73.161.107 is a residential ISP address owned by Prefixx, Inc. (PFX-EXPRESSVPN) with a low-risk profile. No active threat indicators or services detected. The subnet exhibits minimal abuse density.
## Network Ownership & Classification
- Organization: Prefixx, Inc.
- Netname: PFX-EXPRESSVPN
- ASN: AS206092 (security firewall ltd)
- CIDR Block: 216.73.160.0/22
- Country: United States (New York region)
- Network Role: Residential ISP / Firewalled (no open services)
- Classification: Residential address space
## Threat Assessment
- Risk Score: 0 (Low Risk)
- Abuse Confidence Score: Not applicable
- Blacklist Count: 0
- Known Attackers/Spam Source: No
- Tor Exit Node: No
- Campaign Associations: None identified
- Threat Persistence: 0 days
- Is Persistently Malicious: No
## Service Analysis
- Open Ports: None detected
- HTTPS/TLS Certificates: None
- HTTP Banner: None
- DNS Resolution: Forward resolution not confirmed
- Email Auth (SPF/DMARC): Not detected
## Network Neighborhood Assessment
Subnet 216.73.161.0/24 analysis:
- Total Siblings: 53 IPs
- Abuse Density: 0 (low)
- Risk Distribution: 2 medium-risk, 51 low-risk
- Notable Neighbor: 216.73.161.80 (riskScore: 25)
- Inherited Risk: Low
## Observation History
Twelve signals observed. Recent observations include:
- ASN registration: AS206092 security firewall ltd
- Organization: Prefixx, Inc. (abuse: abuse-reports@vpnconsumer.com)
- Geolocation: New York, United States (40.7157°N, 74°W)
- RIR: ARIN
- One observation flagged threats with four Pulse names
## Connectivity & Traceroute
- Hop Count: 12
- First Hop RTT: 0.3ms
- Last Hop RTT: 27.6ms
- Timed Out Hops: 1
- Transit Network: Comcast
## Recommended Actions
No immediate blocking or firewall rules recommended. The IP demonstrates benign characteristics consistent with residential ISP infrastructure. Monitor for changes in threat status or service emergence.
---
*Report generated: 216.73.161.107/32*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Prefixx, Inc. |
| ASN | AS206092 |
| Network Name | PFX-EXPRESSVPN |
| CIDR Block | 216.73.160.0/22 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No β PTR hostname does not resolve back to this IP (weak signal) |
π DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown β Insufficient routing data to classify |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Mostly Consistent (80%) β 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-07-22 07:16:01 UTC |
| Last Seen | 2026-08-08 16:30:47 UTC |
| Profile Built | 2026-07-29 12:53:00 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 20 |
Full dossier details are available via our API.