216.73.163.6
216.73.163.6 is an IPv4 address operated by Prefixx, Inc. (AS206092), geolocated to San Francisco, United States. As of October 6, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.
# IP Intelligence Briefing: 216.73.163.6/32
Classification: Routine Monitoring | Risk Level: LOW | Status: No Action Required
---
## Executive Summary
IP 216.73.163.6 is classified as low risk (score: 25) and belongs to Prefixx, Inc. (ASN: 206092), a registered entity under the PFX-EXPRESSVPN network block (216.73.160.0/22). The address shows no active threat indicators, no open services, and no blacklist listings. No security actions are recommended at this time.
---
## Ownership and Infrastructure
| Attribute | Value |
|---|---|
| **Organization** | Prefixx, Inc. |
| **Network Name** | PFX-EXPRESSVPN |
| **ASN** | 206092 |
| **CIDR Block** | 216.73.160.0/22 |
| **RIR** | ARIN |
| **Abuse Contact** | abuse-reports@vpnconsumer.com |
| **Registration** | US (ARIN) |
The IP is registered to Prefixx, Inc., operating within the 216.73.160.0/22 allocation. No malicious ownership transfers have been detected during observation.
---
## Network Classification
| Category | Status |
|---|---|
| Provider | No |
| Infrastructure Type | No |
| Connection Type | No |
| Cloud Service | No |
| CDN | No |
| VPN Service | No |
| Proxy | No |
| Tor Exit Node | No |
| Hosting | No |
| Mobile | No |
| Residential | No |
| Bogon | No |
| Anycast | No |
Service Status: No open ports detected. Classification indicates "Firewalled / No Services."
---
## Threat Assessment
| Indicator | Status |
|---|---|
| **Risk Score** | 25 (Low) |
| **Abuse Confidence** | Not applicable |
| **Known Attacker** | No |
| **Spam Source** | No |
| **Blacklist Count** | 0 |
| **DNSBL Listed** | 1 of 8 lists |
| **Threat Persistence** | 0 days |
| **Known Campaigns** | None |
| **Pulsedive Risk** | Not available |
No threat indicators detected in threat feeds or reputation sources.
---
## Geolocation Data
Multiple geolocation sources indicate US origin with some geographic variance between datasets:
| Source | Location | Confidence |
|---|---|---|
| ARIN/RIR | United States | High |
| MaxMind | California (San Francisco) | Moderate |
| Other Sources | United States | Moderate |
Consensus: United States. Geographic consistency across sources is moderate.
---
## Neighborhood Analysis
Subnet: 216.73.163.0/24 | Total Siblings: 81
| Metric | Value |
|---|---|
| **Abuse Density** | 0 |
| **High Risk IPs** | 0 |
| **Medium Risk IPs** | 1 |
| **Low Risk IPs** | 80 |
Notable neighbors include 216.73.163.2 (risk score: 60) and 216.73.163.10 (risk score: 20). The subnet maintains a low abuse density profile.
---
## Observation History
13 observations recorded, primarily showing:
- Consistent ownership registration to Prefixx, Inc.
- Stable network classification
- Geographic signal variance (US-based sources)
- No persistent malicious behavior detected
---
## Relationship Graph
Single relationship identified:
- Same Network: PFX-EXPRESSVPN
---
## Recommended Actions
No specific actions recommended. The IP presents a low-risk profile with no active threat indicators. Standard network monitoring protocols are sufficient.
---
## Analyst Notes
- IP 216.73.163.6 demonstrates minimal risk characteristics consistent with legitimate enterprise infrastructure.
- No immediate threat correlation detected with known campaigns or attack patterns.
- The subnet maintains low abuse density despite presence of a few elevated-risk neighbors.
- Continue routine monitoring; no escalation or blocking required at this time.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Prefixx, Inc. |
| ASN | AS206092 |
| Network Name | PFX-EXPRESSVPN |
| CIDR Block | 216.73.160.0/22 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS206092 |
| Network Prefix | 216.73.163.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 23% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 12% | 2 | 2 |
| ownership | 17% | 2 | 3 |
| reputation | 8% | 1 | 2 |
| geolocation | 17% | 2 | 3 |
| Overall | 14% | 10 | 15 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-17 17:12:44 UTC |
| Last Seen | 2026-10-06 08:24:28 UTC |
| Profile Built | 2026-10-06 08:24:56 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 20 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 216.73.163.6
Who owns the IP address 216.73.163.6?
216.73.163.6 is registered to Prefixx, Inc.. The address falls within the 216.73.160.0/22 network block. Registration is held at ARIN.
Where is 216.73.163.6 located?
Geolocation data places 216.73.163.6 in San Francisco, California, United States. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 216.73.163.6 malicious or safe?
216.73.163.6 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.