178.18.242.84📋 Copy

IP Intelligence Briefing: 178.18.242.84

Date: 2026-06-16

1. Core Profile

• Risk Score: Low (25/100) | Reputation: Clean | Provider: Tor Exit Node
• Geolocation: Paris, France (Grand Est region) | ASN: 51167 (Contabo GmbH)
• Network Role: Tor Exit Node | Services: No open ports detected
• Ownership: No registered ASN/org details | DNS: PTR hostname `vmi3185617.contaboserver.net`

2. Threat Indicators

• DNSBL Listing: 1 high-severity listing (confidence: 85%) | Malware Campaigns: None detected
• Email Security: No SPF/DMArC records for `contaboserver.net` | TLS/SSL: No certificate data

3. Observation History

• Recent Activity (30d): 13 signals observed, including:

- DNS resolution for `contaboserver.net` (no email security policies)

- BGP prefix `178.18.240.0/20` (Contabo GmbH)

- DNSSEC-valid reverse DNS (`84.242.18.178.in-addr.arpa`)

• Trend: No significant changes in risk profile over time.

4. Relationships

• DNS Association: Linked to `vmi3185617.contaboserver.net` (hosted domain: `contaboserver.net`)
• BGP: Part of `178.18.240.0/20` (Contabo GmbH, Germany)

5. Neighborhood Analysis

• Subnet: `178.18.242.84/24` | Abuse Density: 0%
• Neighbors: No active IPs in the subnet (0 siblings detected)

6. Recommendations

• Monitor: The DNSBL listing for `178.18.242.84` and verify if it aligns with known threats.
• Investigate: Contabo’s hosting infrastructure for potential vulnerabilities (e.g., misconfigured DNS/email security).
• Blocklist: Consider blocking the DNSBL listing if confirmed malicious.
• Network: Given the Tor exit node association, monitor for anomalous traffic patterns.

Conclusion:

The IP is associated with a hosting provider (Contabo) and shows no direct malicious activity. However, the DNSBL listing and lack of email security policies for the linked domain warrant further investigation. No immediate action is required, but continuous monitoring is advised.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.