216.73.163.4📋 Copy

# IP Intelligence Briefing: 216.73.163.4/32

Classification: Low Risk | Risk Score: 25 | Report Date: 2026-07-28

## Executive Summary

IP 216.73.163.4 is a low-risk endpoint belonging to Prefixx, Inc. (ASN 206092) within the PFX-EXPRESSVPN network block. The IP exhibits no active threat indicators, no open services, and minimal DNSBL presence. Network classification indicates firewall protection with no exposed services.

## Ownership & Infrastructure

• Organization: Prefixx, Inc.
• Network: PFX-EXPRESSVPN
• CIDR Block: 216.73.160.0/22
• ASN: 206092
• Geolocation: United States, California, San Francisco
• Network Role: Firewall / No Services

## Threat Assessment

• Overall Risk: Low (Score: 25/100)
• Abuse Confidence: None detected
• Blacklist Status: 1 of 8 DNSBL listings
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Campaign Association: None identified
• Persistent Threat Status: No

## Network Behavior

• Open Ports: None detected
• DNS Resolution: Forward resolution not confirmed
• Hosted Domains: None
• Email Authentication: SPF/DMARC not configured
• TLS Certificates: None
• HTTP Banner: None
• Connection Type: Not a proxy, CDN, cloud, or hosting service

## Control Plane Analysis

• Route Stability: False (route changes observed)
• Operator Score: 0.1304 (Minimal)
• RPKI State: Not verified
• DNSSEC: Valid
• Bogon Status: Not bogon

## Neighborhood Analysis (216.73.163.0/24)

• Total Siblings: 82 IPs
• Active Siblings: 37
• Threat Siblings: 2
• Abuse Density: 0.0244
• Subnet Classification: Clean
• Risk Distribution: 80 low, 1 medium, 0 high
• Elevated Risk Neighbor: 216.73.163.2 (Risk Score: 60)

## Observation History

Sixteen signal observations recorded between 2026-07-28. Historical trend analysis shows:

• No ownership changes
• No persistent malicious activity
• No threat observations over time
• Consistent "clean" network classification
• Stable service state (no open ports across observations)

## Relationships

All relationship graph entries indicate association with the PFX-EXPRESSVPN network. No external organization, hostname, or certificate relationships identified.

## Recommended Actions

Based on current risk profile, standard monitoring is appropriate. The IP presents minimal threat characteristics. No immediate blocking or filtering required.

Note: One neighboring IP (216.73.163.2) shows elevated risk (60) and should be monitored separately.

---

*Intel produced by IPDebrief Platform | Authorized Defensive Security Analysis*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.