# 216.73.163.35 — IP Intelligence Summary 216.73.163.35 is an IPv4 address operated by Prefixx, Inc. (AS206092), geolocated to San Francisco, United States. As of November 6, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/216.73.163.35 - Last updated: 2026-11-06 ## Ownership - Organization: Prefixx, Inc. - Network name: PFX-EXPRESSVPN - Allocated block: 216.73.160.0/22 - ASN: AS206092 (https://ipdebrief.com/asn/206092) - Regional registry: ARIN ## Location - City: San Francisco - Region: California - Country: United States - Time zone: — ## Network classification - Infrastructure type: — - Datacenter / hosting: no - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: Low Risk (25/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Analyst narrative \# IP Intelligence Briefing: 216.73.163.35/32 \## Executive Summary The IP address 216.73.163.35/32 presents as a low-risk address with no active threat indicators. The address belongs to Prefixx, Inc. (PFX-EXPRESSVPN) and currently shows no open services, blacklisting, or observed malicious behavior. Historical monitoring indicates stable ownership and no persistent threat activity. \## Ownership and Network Context \- **Organization:** Prefixx, Inc. \- **Network Name:** PFX-EXPRESSVPN \- **ASN:** 206092 \- **CIDR Block:** 216.73.160.0/22 \- **RIR:** ARIN \- **Abuse Contact:** Available via RDAP The IP resides in a /24 subnet containing 82 sibling addresses, with the target address itself showing risk score 0. The subnet classification remains "clean" with inherited risk of 0. \## Geolocation \- **Country:** United States (US) \- **Region:** California \- **City:** San Francisco \- **Geographic Accuracy:** 2500 km radius \- **Geo Source Consensus:** True (1 source) \- **Geo Validation:** Not plausible (distance verification unavailable) \## Threat Assessment \- **Reputation:** Low Risk \- **Risk Score:** 0 \- **Provider Score:** 0 \- **Authority Score:** 0 \- **Stability Score:** 0 \- **Blacklist Count:** 0 \- **Tor Exit Node:** No \- **Known Attacker:** No \- **Spam Source:** No \- **Abuse Confidence Score:** Not scored \- **Threat Feeds:** None detected \- **Known Campaigns:** None correlated \## Network Behavior and Services \- **Service Purpose:** Firewalled / No Services \- **Open Ports:** None detected \- **TLS Certificate:** None \- **HTTP Title:** None \- **Server Banner:** None \- **DNS PTR Hostnames:** None \- **Forward Resolution Count:** 0 \- **Hosted Domains:** 0 \## Neighborhood Analysis The /24 subnet (216.73.163.0/24) contains 81 sibling IPs with the following risk distribution: \- **High Risk:** 0 IPs \- **Medium Risk:** 1 IP (216.73.163.2, risk score 60) \- **Low Risk:** 80 IPs The subnet abuse density measures 0, indicating minimal abusive activity at the neighborhood level. Notable neighbors include: \- 216.73.163.2: Risk score 60, Authority score 50 \- 216.73.163.6: Risk score 25, Authority score 50 \- 216.73.163.10: Risk score 20, Authority score 50 \## Historical Observations Analysis of 16 historical observations from 2026-07-28 indicates: \- **Ownership Changes:** 0 (stable ownership) \- **Threat Observation Count:** 0 \- **Threat Persistence Days:** 0 \- **Persistently Malicious:** No \- **Route Changes (30d):** 0 \- **Route Stability:** False (routing instability observed) \- **BGP Prefix:** 216.73.163.0/24 Recent signal observations included port scanning activities and network classification checks, though no confirmed threat indicators were observed in the historical data. \## Traceroute Analysis \- **Hop Count:** 11 \- **First Hop RTT:** 0.2 ms \- **Last Hop RTT:** 89 ms \- **Timed Out Hops:** 2 \- **Transit Networks:** Comcast detected \## Control Plane Analysis \- **Origin ASN:** 206092 \- **BGP Prefix:** 216.73.163.0/24 \- **RPKI State:** Not assessed \- **IRR Consistency:** Not assessed \- **Route Changes (30d):** 0 \- **Is Route Stable:** False \- **Is Routeless:** No \- **DNSSEC Valid:** True \- **Operator Score:** 0.1304 (Minimal) \- **DNSBL Listed Count:** 0 \- **DNSBL Total Lists:** 8 (total lists across all DNSBLs) \## Behavioral Analysis \- **Honeypot Hits:** 0 \- **Enumeration Strikes:** 0 \- **WAF Violations:** 0 \- **Total Incidents:** 0 \- **Categorization:** No threat category assigned \## Security Recommendations Based on the low-risk profile and absence of threat indicators, the following actions are recommended: \- **Firewall Rules:** No blocking \- **Traffic Monitoring:** Standard logging advised. \- **Sibling Watch:** Monitor 216.73.163.2 (risk score 60) for potential lateral activity within the subnet. \- **Investigation:** No immediate threat investigation required. \- **Threat Intel Sharing:** No correlation with known campaigns. \## Conclusion The IP address 216.73.163.35/32 is currently assessed as low risk with no active threat indicators. No immediate defensive action is required beyond standard network logging. Ongoing monitoring is recommended due to the presence of one medium-risk sibling within the same /24 subnet. Route instability detected in the control plane (isRouteStable:false) does not correlate with observed threat activity. ## Nearby addresses - 216.73.163.2 (https://ipdebrief.com/216.73.163.2) - 216.73.163.4 (https://ipdebrief.com/216.73.163.4) - 216.73.163.6 (https://ipdebrief.com/216.73.163.6) - 216.73.163.7 (https://ipdebrief.com/216.73.163.7) - 216.73.163.10 (https://ipdebrief.com/216.73.163.10) - 216.73.163.11 (https://ipdebrief.com/216.73.163.11) - 216.73.163.12 (https://ipdebrief.com/216.73.163.12) - 216.73.163.13 (https://ipdebrief.com/216.73.163.13) - 216.73.163.16 (https://ipdebrief.com/216.73.163.16) - 216.73.163.20 (https://ipdebrief.com/216.73.163.20) - 216.73.163.22 (https://ipdebrief.com/216.73.163.22) - 216.73.163.24 (https://ipdebrief.com/216.73.163.24) --- Source: IPDebrief, "216.73.163.35 IP intelligence", https://ipdebrief.com/216.73.163.35, updated 2026-11-06. Assessments are probabilistic.