# 216.73.163.185 — IP Intelligence Summary

216.73.163.185 is an IPv4 address operated by Prefixx, Inc. (AS206092), geolocated to San Francisco, United States. As of September 5, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/216.73.163.185
- Last updated: 2026-09-05

## Ownership

- Organization: Prefixx, Inc.
- Network name: PFX-EXPRESSVPN
- Allocated block: 216.73.160.0/22
- ASN: AS206092 (https://ipdebrief.com/asn/206092)
- Regional registry: ARIN

## Location

- City: San Francisco
- Region: CA
- Country: United States
- Time zone: America/Los_Angeles

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\# INTELLIGENCE BRIEFING: 216.73.163.185/32

\## Executive Summary

IP address 216.73.163.185 is associated with Prefixx, Inc. (PFX-EXPRESSVPN), an ExpressVPN service provider. The IP presents a low-risk profile (risk score: 25) with no active threat indicators. The address is currently classified as clean with no observed malicious activity.

\## Network Ownership & Classification

| Attribute | Value |

|-----------|-------|

| **Organization** | Prefixx, Inc. |

| **Network Name** | PFX-EXPRESSVPN |

| **ASN** | 206092 |

| **CIDR Block** | 216.73.160.0/22 |

| **Location** | San Francisco, CA, US |

| **Registration** | ARIN |

The IP is designated for firewalled/no service purposes with no open ports detected. DNS reverse resolution failed, and no hosted domains were identified.

\## Threat Assessment

\- **Risk Score:** 25 (Low Risk)

\- **Blacklist Status:** Listed on 1 of 8 DNSBLs

\- **Tor Exit Node:** No

\- **Known Attacker:** No

\- **Spam Source:** No

\- **Known Campaigns:** None

\- **Operator Score:** 0.1304 (Minimal)

No threat indicators, abuse confidence scores, or known campaign associations were detected. The IP's control plane shows route instability (route changes observed in 30-day period).

\## Neighborhood Analysis (216.73.163.0/24)

| Metric | Value |

|--------|-------|

| **Total Siblings** | 82 |

| **Active Siblings** | 18 |

| **Threat Siblings** | 0 |

| **Abuse Density** | 0 |

| **Subnet Classification** | Clean |

| **Risk Distribution** | 0 High, 1 Medium, 80 Low |

The subnet maintains a clean classification with minimal abuse density. Only one medium-risk neighbor was identified.

\## Historical Observation

Fifteen observations tracked since monitoring began. Recent signals consistently show:

\- Clean classification with zero inherited risk

\- No ownership changes

\- Zero threat persistence days

\- Minimal operator score maintained

No escalation in threat profile observed over the monitoring period.

\## Relationships

Relationship graph identifies only same-network associations with PFX-EXPRESSVPN. No external relationships to organizations, hostnames, or certificates were detected.

\## Recommended Actions

No immediate defensive actions required. The IP presents a low-risk profile consistent with legitimate VPN service operations.

**SOC Analyst Guidance:**

\- Monitor for service activation if previously dormant

\- No immediate blocking or filtering recommended

\- Continue passive observation of subnet activity patterns

\---

*Intel generated from IPDebrief analysis. All data sourced from IPDebrief intelligence platform.*

## Nearby addresses

- 216.73.163.2 (https://ipdebrief.com/216.73.163.2)
- 216.73.163.4 (https://ipdebrief.com/216.73.163.4)
- 216.73.163.6 (https://ipdebrief.com/216.73.163.6)
- 216.73.163.7 (https://ipdebrief.com/216.73.163.7)
- 216.73.163.10 (https://ipdebrief.com/216.73.163.10)
- 216.73.163.11 (https://ipdebrief.com/216.73.163.11)
- 216.73.163.12 (https://ipdebrief.com/216.73.163.12)
- 216.73.163.13 (https://ipdebrief.com/216.73.163.13)
- 216.73.163.16 (https://ipdebrief.com/216.73.163.16)
- 216.73.163.20 (https://ipdebrief.com/216.73.163.20)
- 216.73.163.22 (https://ipdebrief.com/216.73.163.22)
- 216.73.163.24 (https://ipdebrief.com/216.73.163.24)

---

Source: IPDebrief, "216.73.163.185 IP intelligence", https://ipdebrief.com/216.73.163.185, updated 2026-09-05. Assessments are probabilistic.