216.73.163.194📋 Copy

INTELLIGENCE BRIEFING: IP 216.73.163.194/32

Classification: LOW RISK / VPN PROVIDER INFRASTRUCTURE

Date: Current Intelligence Cycle

Analyst: IPDebrief Intelligence Team

---

EXECUTIVE SUMMARY

IP address 216.73.163.194 operates within a low-risk profile (risk score: 25/100) associated with Prefixx, Inc., a VPN service provider. The address exhibits minimal threat indicators with no active service exposure, though historical data includes isolated threat signal detections from external feeds.

---

OWNERSHIP AND NETWORK CONTEXT

• Organization: Prefixx, Inc. (AS206092)
• Network Name: PFX-EXPRESSVPN
• CIDR Block: 216.73.160.0/22
• Geolocation: San Francisco, California, US (ARIN RIR)
• Network Role: Infrastructure (Firewalled / No Services)

The IP belongs to a /24 subnet (216.73.163.0/24) containing 81 total addresses. Neighborhood analysis indicates minimal abuse density with 80 low-risk and 1 medium-risk IP (216.73.163.2, risk score: 60). No high-risk neighbors detected.

---

THREAT ASSESSMENT

Current Risk Profile:

• Reputation: Low Risk
• Risk Score: 25/100
• Blacklist Status: 1 DNSBL listing (out of 8 total lists)
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No

Threat Indicators: None currently active in primary threat feeds. Pulsedive risk assessment unavailable.

---

NETWORK BEHAVIOR AND SERVICES

Service Exposure: None detected

• Open ports: None
• TLS Certificate: None
• HTTP Title/Server Banner: None
• DNS PTR Resolution: Not configured
• Forward Resolution: No DNS records

Network Classification:

• Not identified as CDN, Cloud, Proxy, Hosting, Mobile, or Residential infrastructure
• Connection type: Undetermined
• Anycast: No

---

OBSERVATION HISTORY

Total Observations: 13 signals recorded

Recent Activity (July 27, 2026):

• Threat Signal Detected: AlienVault OTX identified threat presence with 6 pulse indicators (signal confidence: 0.85)
• Operator Score: 0.1304 (labeled as "Minimal")
• Geolocation Consensus: US (confidence: 0.35, accuracy radius: 2500 km)

Temporal Analysis:

• Ownership changes: None recorded
• Threat persistence: None
• Threat observation count: 0
• Persistently malicious: No

---

RELATIONSHIP MAPPING

Three network relationships identified, all pointing to the same network entity:

• Same Network: PFX-EXPRESSVPN (×3 entries)

No associations detected with external hostnames, organizations, or SSL certificates.

---

CONTROL PLANE ANALYSIS

• Route Stability: Not stable
• BGP Prefix: 216.73.163.0/24
• Route Changes (30d): 0
• RPKI State: Unavailable
• DNSSEC: Valid
• DNSBL Listings: 1 of 8 lists
• Hop Count: 11 hops to final destination
• Transit Networks: Comcast

---

SECURITY RECOMMENDATIONS

Current Action Level: MONITOR

No immediate blocking or mitigation actions required based on current risk profile.

Recommended Actions:

1. Allow with Monitoring: Traffic from this IP may be permitted with logging enabled

2. VPN Traffic Recognition: Expect potential VPN/connection establishment patterns

3. No Immediate Blocking: Risk score (25) does not warrant automatic drop rules

4. Contextual Analysis: Correlate with organizational VPN traffic baselines

---

INTELLIGENCE GAP ANALYSIS

Data Quality Notes:

• Some geolocation fields contain null values despite location consensus
• Limited historical data for temporal trend analysis
• No service scanning data available (ports closed or filtered)

---

CONCLUSION

IP 216.73.163.194 represents standard VPN provider infrastructure with low-risk characteristics. While isolated threat signals appear in external feeds (AlienVault OTX), no active malicious behavior is currently confirmed. The IP should be permitted with monitoring and correlated against known VPN traffic patterns. No immediate defensive action required.

Confidence Level: MEDIUM (based on limited service data availability)

Next Review: Standard 7-day cycle or upon threat signal escalation

---

*Report generated by IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.