163.172.73.44📋 Copy

# IP Intelligence Briefing: 163.172.73.44/32

## Executive Summary

IP 163.172.73.44 operates on Scaleway infrastructure (ASN 12876) with a moderate risk score of 65/100. The IP is configured as a web server hosting the domain admin.vatech.site. While no active threat indicators were detected, the elevated risk score warrants monitoring and enhanced logging. The IP is hosted in Paris, France, on the SCALEWAY-DEDIBOX network.

---

## Technical Profile

Network & Ownership

• IP Address: 163.172.73.44/32
• ASN: 12876 (Scaleway)
• Organization: Mickael Marchand
• Network Name: SCALEWAY-DEDIBOX
• CIDR Block: 163.172.0.0/16
• RIR: APNIC
• Geolocation: Paris, Île-de-France, France (FR)

Service Configuration

• Server: Apache with HTTP/2 support
• Open Ports: TCP/80 (HTTP), TCP/443 (HTTPS), TCP/8080 (HTTP-alt)
• TLS Certificate: Let's Encrypt (CN=admin.vatech.site)
• DNS PTR: 163-172-73-44.rev.poneytelecom.eu
• Forward Resolution: Confirmed (1 record)

Security Posture

• DNSSEC: Valid
• HSTS: Not configured
• CSP: Not configured
• SPF: Not configured
• DMARC: Not configured
• TXT Records: 0

---

## Threat Assessment

Risk Classification: Moderate Risk (65/100)

• Abuse Confidence: Not quantified
• Blacklist Status: 0 current blacklists, 3 historical DNSBL listings
• Threat Indicators: None detected
• Known Campaigns: None
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

Control Plane Analysis

• Route Stability: Unstable (route changes detected)
• BGP Prefix: 163.172.0.0/16
• Operator Score: 0.2609 (Basic)
• Threat Observation Count: 1
• Persistently Malicious: No

---

## Neighborhood Analysis

Subnet: 163.172.73.44/24

• Abuse Density: 1
• Classification: Mostly clean
• Inherited Risk: 2
• Total Siblings: 1
• Active Siblings: 1
• Threat Siblings: 1

No additional neighboring IPs were identified in the immediate /24 subnet.

---

## Historical Signals

Observation history (20 signals recorded) indicates:

• HTTP/2 enabled with Apache server signature
• HTTPS scheme with cacheable content
• Response time: 1403ms TTFB
• Geolocation consistently inferred as France
• Network tracing: 13 hops to target
• No significant ownership changes observed

---

## Related Entities

Relationship Graph (6 entries):

• Network Associations: SCALEWAY-DEDIBOX (multiple entries)
• DNS Associations: 163-172-73-44.rev.poneytelecom.eu (multiple entries)

Campaign Correlations:

• Cert Matches: 0
• Banner Matches: 0
• Correlated IPs: 0

---

## Recommended Actions

Immediate:

1. Block or Monitor: Implement firewall rules to block or closely monitor traffic from 163.172.73.44

2. Enhanced Logging: Increase logging verbosity for all sessions originating from this IP

3. Review Recent Activity: Analyze connection logs for the past 30 days for anomalous patterns

Firewall Rules:

-

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.