# 216.73.163.171 — IP Intelligence Summary

216.73.163.171 is an IPv4 address operated by Prefixx, Inc. (AS206092), geolocated to San Francisco, United States. As of October 7, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/216.73.163.171
- Last updated: 2026-10-07

## Ownership

- Organization: Prefixx, Inc.
- Network name: PFX-EXPRESSVPN
- Allocated block: 216.73.160.0/22
- ASN: AS206092 (https://ipdebrief.com/asn/206092)
- Regional registry: ARIN

## Location

- City: San Francisco
- Region: CA
- Country: United States
- Time zone: America/Los_Angeles

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\# IPDEBRIEF INTELLIGENCE BRIEFING

**Target:** 216.73.163.171/32 | **Classification:** Threat Intelligence Summary | **Date:** 2026-07-28

\---

\## Executive Summary

IP 216.73.163.171 is classified as **Low Risk** (risk score: 25) with no active threat indicators. The address belongs to Prefixx, Inc. (ASN 206092) and is part of the PFX-EXPRESSVPN network block (216.73.160.0/22). No malicious activity or known campaigns associated with this IP.

\---

\## Ownership & Infrastructure

\- **Organization:** Prefixx, Inc.

\- **Network Name:** PFX-EXPRESSVPN

\- **ASN:** 206092

\- **CIDR Block:** 216.73.160.0/22

\- **Geolocation:** United States, California (San Francisco)

\- **RIR:** ARIN

\- **Abuse Contact:** abuse-reports@vpnconsumer.com

\---

\## Threat Assessment

**Risk Score:** 25 (Low Risk)

| Indicator | Status |

|-----------|--------|

| Known Attacker | No |

| Tor Exit Node | No |

| Spam Source | No |

| Blacklist Count | 0 |

| Open Ports | None detected |

| DNSBL Listed | Yes (1 of 8 lists) |

| Campaign Likelihood | Not applicable |

**Control Plane:** Route stability flagged as unstable (isRouteStable: false). DNSSEC valid.

\---

\## Neighborhood Analysis

\- **Subnet:** 216.73.163.171/24

\- **Total Siblings:** 81 IPs

\- **Abuse Density:** 0

\- **Risk Distribution:** 0 High, 1 Medium, 80 Low

**Notable Neighbor:** 216.73.163.2 (risk score: 60) — elevated risk within same /24.

\---

\## Observation History

12 observations recorded (most recent: 2026-07-28). Consistent ownership and network classification observed. No significant threat pattern changes detected over the observation period.

\---

\## Recommended Actions

\- **Allow:** Traffic permitted. IP not flagged for blocking.

\- **Monitor:** Subnet 216.73.160.0/22 contains one elevated-risk neighbor (216.73.163.2).

\- **No firewall rules** recommended for this specific IP.

\---

\## Intelligence Notes

This IP represents infrastructure for a VPN provider service with minimal abuse indicators. The single DNSBL listing warrants routine monitoring but does not indicate active malicious use. SOC analysts should note the neighborhood risk distribution and monitor the medium-risk sibling IP 216.73.163.2 for correlated activity.

**Confidence Level:** High | **Data Sources:** IPDebrief Intelligence Platform

## Nearby addresses

- 216.73.163.2 (https://ipdebrief.com/216.73.163.2)
- 216.73.163.4 (https://ipdebrief.com/216.73.163.4)
- 216.73.163.6 (https://ipdebrief.com/216.73.163.6)
- 216.73.163.7 (https://ipdebrief.com/216.73.163.7)
- 216.73.163.10 (https://ipdebrief.com/216.73.163.10)
- 216.73.163.11 (https://ipdebrief.com/216.73.163.11)
- 216.73.163.12 (https://ipdebrief.com/216.73.163.12)
- 216.73.163.13 (https://ipdebrief.com/216.73.163.13)
- 216.73.163.16 (https://ipdebrief.com/216.73.163.16)
- 216.73.163.20 (https://ipdebrief.com/216.73.163.20)
- 216.73.163.22 (https://ipdebrief.com/216.73.163.22)
- 216.73.163.24 (https://ipdebrief.com/216.73.163.24)

---

Source: IPDebrief, "216.73.163.171 IP intelligence", https://ipdebrief.com/216.73.163.171, updated 2026-10-07. Assessments are probabilistic.