# 216.73.163.194 — IP Intelligence Summary 216.73.163.194 is an IPv4 address operated by Prefixx, Inc. (AS206092), geolocated to San Francisco, United States. As of October 7, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/216.73.163.194 - Last updated: 2026-10-07 ## Ownership - Organization: Prefixx, Inc. - Network name: PFX-EXPRESSVPN - Allocated block: 216.73.160.0/22 - ASN: AS206092 (https://ipdebrief.com/asn/206092) - Regional registry: ARIN ## Location - City: San Francisco - Region: CA - Country: United States - Time zone: America/Los_Angeles ## Network classification - Infrastructure type: — - Datacenter / hosting: no - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: Low Risk (25/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Analyst narrative **INTELLIGENCE BRIEFING: IP 216.73.163.194/32** **Classification:** LOW RISK / VPN PROVIDER INFRASTRUCTURE **Date:** Current Intelligence Cycle **Analyst:** IPDebrief Intelligence Team \--- \### EXECUTIVE SUMMARY IP address 216.73.163.194 operates within a low-risk profile (risk score: 25/100) associated with Prefixx, Inc., a VPN service provider. The address exhibits minimal threat indicators with no active service exposure, though historical data includes isolated threat signal detections from external feeds. \--- \### OWNERSHIP AND NETWORK CONTEXT \- **Organization:** Prefixx, Inc. (AS206092) \- **Network Name:** PFX-EXPRESSVPN \- **CIDR Block:** 216.73.160.0/22 \- **Geolocation:** San Francisco, California, US (ARIN RIR) \- **Network Role:** Infrastructure (Firewalled / No Services) The IP belongs to a /24 subnet (216.73.163.0/24) containing 81 total addresses. Neighborhood analysis indicates minimal abuse density with 80 low-risk and 1 medium-risk IP (216.73.163.2, risk score: 60). No high-risk neighbors detected. \--- \### THREAT ASSESSMENT **Current Risk Profile:** \- **Reputation:** Low Risk \- **Risk Score:** 25/100 \- **Blacklist Status:** 1 DNSBL listing (out of 8 total lists) \- **Known Attacker:** No \- **Spam Source:** No \- **Tor Exit Node:** No **Threat Indicators:** None currently active in primary threat feeds. Pulsedive risk assessment unavailable. \--- \### NETWORK BEHAVIOR AND SERVICES **Service Exposure:** None detected \- Open ports: None \- TLS Certificate: None \- HTTP Title/Server Banner: None \- DNS PTR Resolution: Not configured \- Forward Resolution: No DNS records **Network Classification:** \- Not identified as CDN, Cloud, Proxy, Hosting, Mobile, or Residential infrastructure \- Connection type: Undetermined \- Anycast: No \--- \### OBSERVATION HISTORY **Total Observations:** 13 signals recorded **Recent Activity (July 27, 2026):** \- **Threat Signal Detected:** AlienVault OTX identified threat presence with 6 pulse indicators (signal confidence: 0.85) \- **Operator Score:** 0.1304 (labeled as "Minimal") \- **Geolocation Consensus:** US (confidence: 0.35, accuracy radius: 2500 km) **Temporal Analysis:** \- Ownership changes: None recorded \- Threat persistence: None \- Threat observation count: 0 \- Persistently malicious: No \--- \### RELATIONSHIP MAPPING Three network relationships identified, all pointing to the same network entity: \- **Same Network:** PFX-EXPRESSVPN (×3 entries) No associations detected with external hostnames, organizations, or SSL certificates. \--- \### CONTROL PLANE ANALYSIS \- **Route Stability:** Not stable \- **BGP Prefix:** 216.73.163.0/24 \- **Route Changes (30d):** 0 \- **RPKI State:** Unavailable \- **DNSSEC:** Valid \- **DNSBL Listings:** 1 of 8 lists \- **Hop Count:** 11 hops to final destination \- **Transit Networks:** Comcast \--- \### SECURITY RECOMMENDATIONS **Current Action Level:** MONITOR No immediate blocking or mitigation actions required based on current risk profile. **Recommended Actions:** 1. **Allow with Monitoring:** Traffic from this IP may be permitted with logging enabled 2. **VPN Traffic Recognition:** Expect potential VPN/connection establishment patterns 3. **No Immediate Blocking:** Risk score (25) does not warrant automatic drop rules 4. **Contextual Analysis:** Correlate with organizational VPN traffic baselines \--- \### INTELLIGENCE GAP ANALYSIS **Data Quality Notes:** \- Some geolocation fields contain null values despite location consensus \- Limited historical data for temporal trend analysis \- No service scanning data available (ports closed or filtered) \--- \### CONCLUSION IP 216.73.163.194 represents standard VPN provider infrastructure with low-risk characteristics. While isolated threat signals appear in external feeds (AlienVault OTX), no active malicious behavior is currently confirmed. The IP should be permitted with monitoring and correlated against known VPN traffic patterns. No immediate defensive action required. **Confidence Level:** MEDIUM (based on limited service data availability) **Next Review:** Standard 7-day cycle or upon threat signal escalation \--- *Report generated by IPDebrief Intelligence Platform* ## Nearby addresses - 216.73.163.2 (https://ipdebrief.com/216.73.163.2) - 216.73.163.4 (https://ipdebrief.com/216.73.163.4) - 216.73.163.6 (https://ipdebrief.com/216.73.163.6) - 216.73.163.7 (https://ipdebrief.com/216.73.163.7) - 216.73.163.10 (https://ipdebrief.com/216.73.163.10) - 216.73.163.11 (https://ipdebrief.com/216.73.163.11) - 216.73.163.12 (https://ipdebrief.com/216.73.163.12) - 216.73.163.13 (https://ipdebrief.com/216.73.163.13) - 216.73.163.16 (https://ipdebrief.com/216.73.163.16) - 216.73.163.20 (https://ipdebrief.com/216.73.163.20) - 216.73.163.22 (https://ipdebrief.com/216.73.163.22) - 216.73.163.24 (https://ipdebrief.com/216.73.163.24) --- Source: IPDebrief, "216.73.163.194 IP intelligence", https://ipdebrief.com/216.73.163.194, updated 2026-10-07. Assessments are probabilistic.