# 216.73.163.6 — IP Intelligence Summary 216.73.163.6 is an IPv4 address operated by Prefixx, Inc. (AS206092), geolocated to San Francisco, United States. As of October 6, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/216.73.163.6 - Last updated: 2026-10-06 ## Ownership - Organization: Prefixx, Inc. - Network name: PFX-EXPRESSVPN - Allocated block: 216.73.160.0/22 - ASN: AS206092 (https://ipdebrief.com/asn/206092) - Regional registry: ARIN ## Location - City: San Francisco - Region: California - Country: United States - Time zone: — ## Network classification - Infrastructure type: — - Datacenter / hosting: no - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: Low Risk (25/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Analyst narrative \# IP Intelligence Briefing: 216.73.163.6/32 **Classification:** Routine Monitoring | **Risk Level:** LOW | **Status:** No Action Required \--- \## Executive Summary IP 216.73.163.6 is classified as low risk (score: 25) and belongs to Prefixx, Inc. (ASN: 206092), a registered entity under the PFX-EXPRESSVPN network block (216.73.160.0/22). The address shows no active threat indicators, no open services, and no blacklist listings. No security actions are recommended at this time. \--- \## Ownership and Infrastructure | Attribute | Value | |-----------|-------| | **Organization** | Prefixx, Inc. | | **Network Name** | PFX-EXPRESSVPN | | **ASN** | 206092 | | **CIDR Block** | 216.73.160.0/22 | | **RIR** | ARIN | | **Abuse Contact** | abuse-reports@vpnconsumer.com | | **Registration** | US (ARIN) | The IP is registered to Prefixx, Inc., operating within the 216.73.160.0/22 allocation. No malicious ownership transfers have been detected during observation. \--- \## Network Classification | Category | Status | |----------|--------| | Provider | No | | Infrastructure Type | No | | Connection Type | No | | Cloud Service | No | | CDN | No | | VPN Service | No | | Proxy | No | | Tor Exit Node | No | | Hosting | No | | Mobile | No | | Residential | No | | Bogon | No | | Anycast | No | **Service Status:** No open ports detected. Classification indicates "Firewalled / No Services." \--- \## Threat Assessment | Indicator | Status | |-----------|--------| | **Risk Score** | 25 (Low) | | **Abuse Confidence** | Not applicable | | **Known Attacker** | No | | **Spam Source** | No | | **Blacklist Count** | 0 | | **DNSBL Listed** | 1 of 8 lists | | **Threat Persistence** | 0 days | | **Known Campaigns** | None | | **Pulsedive Risk** | Not available | No threat indicators detected in threat feeds or reputation sources. \--- \## Geolocation Data Multiple geolocation sources indicate US origin with some geographic variance between datasets: | Source | Location | Confidence | |--------|----------|------------| | ARIN/RIR | United States | High | | MaxMind | California (San Francisco) | Moderate | | Other Sources | United States | Moderate | Consensus: United States. Geographic consistency across sources is moderate. \--- \## Neighborhood Analysis **Subnet:** 216.73.163.0/24 | **Total Siblings:** 81 | Metric | Value | |--------|-------| | **Abuse Density** | 0 | | **High Risk IPs** | 0 | | **Medium Risk IPs** | 1 | | **Low Risk IPs** | 80 | Notable neighbors include 216.73.163.2 (risk score: 60) and 216.73.163.10 (risk score: 20). The subnet maintains a low abuse density profile. \--- \## Observation History 13 observations recorded, primarily showing: \- Consistent ownership registration to Prefixx, Inc. \- Stable network classification \- Geographic signal variance (US-based sources) \- No persistent malicious behavior detected \--- \## Relationship Graph Single relationship identified: \- **Same Network:** PFX-EXPRESSVPN \--- \## Recommended Actions No specific actions recommended. The IP presents a low-risk profile with no active threat indicators. Standard network monitoring protocols are sufficient. \--- \## Analyst Notes \- IP 216.73.163.6 demonstrates minimal risk characteristics consistent with legitimate enterprise infrastructure. \- No immediate threat correlation detected with known campaigns or attack patterns. \- The subnet maintains low abuse density despite presence of a few elevated-risk neighbors. \- Continue routine monitoring; no escalation or blocking required at this time. ## Nearby addresses - 216.73.163.2 (https://ipdebrief.com/216.73.163.2) - 216.73.163.4 (https://ipdebrief.com/216.73.163.4) - 216.73.163.7 (https://ipdebrief.com/216.73.163.7) - 216.73.163.10 (https://ipdebrief.com/216.73.163.10) - 216.73.163.11 (https://ipdebrief.com/216.73.163.11) - 216.73.163.12 (https://ipdebrief.com/216.73.163.12) - 216.73.163.13 (https://ipdebrief.com/216.73.163.13) - 216.73.163.16 (https://ipdebrief.com/216.73.163.16) - 216.73.163.20 (https://ipdebrief.com/216.73.163.20) - 216.73.163.22 (https://ipdebrief.com/216.73.163.22) - 216.73.163.24 (https://ipdebrief.com/216.73.163.24) - 216.73.163.27 (https://ipdebrief.com/216.73.163.27) --- Source: IPDebrief, "216.73.163.6 IP intelligence", https://ipdebrief.com/216.73.163.6, updated 2026-10-06. Assessments are probabilistic.