216.73.163.33📋 Copy

# IP Intelligence Briefing: 216.73.163.33

Classification: Low Risk / VPN Infrastructure

Date: 2026-07-28

Analyst: IPDebrief Intelligence Unit

---

## Executive Summary

IP 216.73.163.33 is a residential/VPN endpoint assigned to Prefixx, Inc. (ASN 206092). The address exhibits low-risk characteristics with no active threat indicators observed. Infrastructure shows typical VPN provider behavior with firewalled services and minimal operational footprint.

---

## Profile Overview

---

## Threat Assessment

Current Risk Profile:

• Threat Indicators: None
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0
• DNSBL Listed: 1 of 8 total lists (minimal impact)
• Operator Score: 0.1304 (Minimal)

Behavioral Indicators:

• Honeypot Hits: 0
• Enumeration Strikes: 0
• WAF Violations: 0
• Total Incidents: 0
• Persistently Malicious: No
• Active Attacker Status: No

---

## Network Characteristics

Infrastructure Status:

• Open Ports: None detected
• HTTP/TLS Services: No active web services
• DNS Resolution: No forward confirmations
• PTR Records: None

Routing Stability:

• Route Stable: No (recent changes observed)
• BGP Prefix Changes (30d): 0
• DNSSEC Valid: Yes
• Transit Networks: Comcast (11-hop traceroute)

---

## Historical Observations

Observation Count: 11 signals recorded

Recent Signal Timeline (2026-07-28):

• 18:27:14 – Organization confirmed: Prefixx, Inc. (ARIN)
• 18:27:05 – Routing/operator signals minimal impact
• 18:26:57 – Geolocation signals indicate US (confidence: 0.35)

Key Historical Notes:

• Consistent ownership attribution to Prefixx, Inc.
• CIDR block 216.73.160.0/22 associated with PFX-EXPRESSVPN
• Abuse contact: abuse-reports@vpnconsumer.com
• No escalation in risk posture over observation period

---

## Subnet Neighborhood Analysis

Subnet: 216.73.163.0/24

Total Siblings: 81 IPs

Abuse Density: 0.00

Risk Distribution:

• High Risk: 0 IPs
• Medium Risk: 1 IP (216.73.163.2, score: 60)
• Low Risk: 80 IPs

Notable Neighbors:

• 216.73.163.2: Risk 60, Authority 50
• 216.73.163.4-7: Risk 25, Authority 50
• 216.73.163.10: Risk 20, Authority 50

---

## Relationship Graph

Direct Relationships: None detected

Associated Hostnames: None

Linked Certificates: None

Connected Organizations: None

---

## Recommended Actions

For SOC/Network Teams:

1. Monitoring Level: Standard monitoring recommended. IP shows VPN infrastructure characteristics.

2. Firewall Rules: No explicit blocks required. Standard VPN policy applies.

3. Threat Hunting: No actionable IOCs identified. Focus on behavioral anomalies rather than static indicators.

4. Neighbor Context: One medium-risk neighbor (216.73.163.2) warrants periodic review but subnet overall shows minimal abuse density.

5. Abuse Reporting: Prefixx, Inc. abuse contact: abuse-reports@vpnconsumer.com

---

## Conclusion

IP 216.73.163.33 represents a standard VPN endpoint from Prefixx, Inc. infrastructure. The address shows no malicious behavior, no active threat indicators, and belongs to a subnet with minimal abuse activity. No immediate defensive action required beyond standard VPN traffic handling policies.

---

Confidence Level: High

Data Sources: 11 observations, 4 dimensions

Last Updated: 2026-07-28

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.