# 216.73.163.22 — IP Intelligence Summary 216.73.163.22 is an IPv4 address operated by Prefixx, Inc. (AS206092), geolocated to San Francisco, United States. As of October 6, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/216.73.163.22 - Last updated: 2026-10-06 ## Ownership - Organization: Prefixx, Inc. - Network name: PFX-EXPRESSVPN - Allocated block: 216.73.160.0/22 - ASN: AS206092 (https://ipdebrief.com/asn/206092) - Regional registry: ARIN ## Location - City: San Francisco - Region: California - Country: United States - Time zone: — ## Network classification - Infrastructure type: — - Datacenter / hosting: no - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: Low Risk (25/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Analyst narrative \# IP Intelligence Briefing: 216.73.163.22/32 \## Executive Summary IP address 216.73.163.22 is a low-risk address associated with Prefixx, Inc. (ASN 206092), operating under the PFX-EXPRESSVPN network designation. The address demonstrates minimal threat activity with a risk score of 20 and no current threat indicators. Geolocation validation shows discrepancies that warrant monitoring. \## Ownership and Network Context \- **Organization:** Prefixx, Inc. (PFX-EXPRESSVPN) \- **ASN:** 206092 \- **CIDR Block:** 216.73.160.0/22 \- **RIR:** ARIN \- **Service Purpose:** Firewalled / No Services \## Threat Assessment \- **Overall Risk Score:** 20 (Low Risk) \- **Abuse Confidence Score:** Not applicable \- **Blacklist Count:** 0 active listings \- **Threat Indicators:** None detected \- **Known Campaigns:** None associated \- **DNSBL Total Lists:** 8 (historical) \## Network Behavior and Infrastructure \- **Open Ports:** None detected \- **TLS Certificate:** Not present \- **DNS PTR Records:** None \- **Forward Resolution:** Not confirmed \- **Route Stability:** False (network routing changes detected) \- **BGP Prefix:** 216.73.163.0/24 \## Geolocation Analysis \- **Reported Location:** San Francisco, California, US \- **Geolocation Plausibility:** False (flagged implausible) \- **Distance Discrepancy:** 8,865.6km from claimed coordinates \- **Minimum Possible RTT:** 177.3ms (observed: 83.0ms) \- **Assessment:** Geolocation data is unreliable; distance measurements indicate data inconsistency \## Neighborhood Analysis \- **Subnet:** 216.73.163.22/24 \- **Total Neighbors:** 82 \- **Abuse Density:** 0.0244 (classified as "clean") \- **Active Siblings:** 26 \- **Threat Siblings:** 2 \- **Risk Distribution:** 0 high-risk, 1 medium-risk (216.73.163.2, score 60), 80 low-risk \## Observation History \- **Total Observations:** 17 signals recorded \- **Recent Activity:** Multiple observations dated 2026-07-28 \- **Threat Persistence:** None detected \- **Ownership Changes:** 0 recorded \- **Signal Types:** RTT/geo validation, port scanning, network classification, subnet abuse density \## Relationship Graph \- **Primary Association:** PFX-EXPRESSVPN network (same network classification) \- **Related Entities:** No certificates, hostnames, or organizations beyond network classification \## Recommended Actions No specific firewall rules or blocking recommendations generated based on current risk profile. The address demonstrates benign behavior with no actionable threat indicators. \## SOC Analyst Notes \- Monitor for changes in geolocation accuracy; implausible RTT measurements suggest potential misconfiguration or data quality issues \- Neighboring IP 216.73.163.2 presents elevated risk (score 60); review if correlation with target IP activity is warranted \- Route stability flag indicates network topology changes; verify if this impacts upstream filtering decisions \- No immediate blocking recommended; maintain observation for threat indicator emergence \--- *Data compiled from IPDebrief intelligence platform. All findings are based on observed signal data and should be validated against additional threat intelligence sources before operational action.* ## Nearby addresses - 216.73.163.2 (https://ipdebrief.com/216.73.163.2) - 216.73.163.4 (https://ipdebrief.com/216.73.163.4) - 216.73.163.6 (https://ipdebrief.com/216.73.163.6) - 216.73.163.7 (https://ipdebrief.com/216.73.163.7) - 216.73.163.10 (https://ipdebrief.com/216.73.163.10) - 216.73.163.11 (https://ipdebrief.com/216.73.163.11) - 216.73.163.12 (https://ipdebrief.com/216.73.163.12) - 216.73.163.13 (https://ipdebrief.com/216.73.163.13) - 216.73.163.16 (https://ipdebrief.com/216.73.163.16) - 216.73.163.20 (https://ipdebrief.com/216.73.163.20) - 216.73.163.24 (https://ipdebrief.com/216.73.163.24) - 216.73.163.27 (https://ipdebrief.com/216.73.163.27) --- Source: IPDebrief, "216.73.163.22 IP intelligence", https://ipdebrief.com/216.73.163.22, updated 2026-10-06. Assessments are probabilistic.