JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

158.220.108.22

Neutral Activity

Abuse confidence score ?

0% Low Risk

3 reports

1 reporter · latest 1 year ago

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmd193581.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

158.220.108.22 has been reported 3 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 158.220.108.22

Export CSV

This IP address has been reported a total of 3 times from 1 distinct source. 158.220.108.22 was first reported on July 22nd 2025, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 synthetic-motor-oil-change-and-filters.com	2025-08-18 17:44:00 (1 year ago)	Received: Mon, Aug 18, 2025 09:10:02 PDT. Phishing/impersonation email claiming “iCloud” storage is ... show more Received: Mon, Aug 18, 2025 09:10:02 PDT. Phishing/impersonation email claiming “iCloud” storage is full and urging “GET MORE STORAGE,” with redirect links hosted on Google Cloud Storage. Message sent via goldner.undomesti.com [158.220.108.22]. Auth: SPF PASS for [email protected] via 158.220.108.22; DKIM and DMARC not shown/aligned. Header/RFC issues: bogus Content-Transfer-Encoding “8bit+”; malformed Sender field (no address); Gmail inserted “SMTPIN_ADDED_BROKEN” Message-ID; visible From domain mismatches envelope MAIL FROM (likely DMARC fail/absent). This is deceptive commercial email / credential-harvesting, potentially violating CAN-SPAM (15 U.S.C. §7704) and U.S. wire fraud statute (18 U.S.C. §1343). All headers are reported to the mail server’s hosting company. Host / abuse contacts (owner of 158.220.108.0/24): Contabo GmbH (AS51167). Abuse email: [email protected] (per RIPE remarks). Main phone (Contabo): +49 (89) 3564717-71. show less	Fraud Orders Phishing Web Spam Email Spam Spoofing Exploited Host
🇺🇸 synthetic-motor-oil-change-and-filters.com	2025-07-25 11:38:00 (1 year ago)	This spam email was received with a subject line claiming "Congratulations, You’ve been nominated" a ... show more This spam email was received with a subject line claiming "Congratulations, You’ve been nominated" and contained misleading promotional content disguised as a professional opportunity. The body is filled with clickbait styled HTML leading to external redirect links, attempting to lure recipients into clicking under false pretenses. The message falsely used the recipient’s name in the "From" field, a deceptive social engineering tactic to increase trust. The Return-Path domain film.manek.us.com was authenticated via SPF (pass) and DKIM (pass), but this only confirms technical delivery — the content and intent remain clearly unsolicited. The spam content includes phishing-style formatting and visual deception, resembling a professional newsletter but leading to unrelated marketing content. Despite prior complaints, the host of this IP (SoftLayer Technologies Inc., IP 158.220.108.22) appears unresponsive, as the spam continues unabated. show less	Fraud Orders Phishing Web Spam Email Spam Spoofing Exploited Host
🇺🇸 synthetic-motor-oil-change-and-filters.com	2025-07-22 11:42:00 (1 year ago)	This email is a deceptive message claiming to confirm an order for 100 pcs of "Super Strong Magnet H ... show more This email is a deceptive message claiming to confirm an order for 100 pcs of "Super Strong Magnet Hooks" totaling $174.00, attempting to induce the recipient to click a malicious "View or Manage Order" link. The From field falsely used the recipient's name to create a misleading sense of authenticity. The message includes fabricated details such as an Order ID (103-7257819-9574201) and delivery dates. SPF authentication failed for the sending domain (SPF: FAIL). DKIM passed, but DMARC also failed, indicating the message is not authorized by the purported sending domain. The message is clearly fraudulent and attempts to spoof Amazon transactional email formatting. The originating IP address shows evidence of unauthorized use for bulk spam or phishing attempts. This report is submitted to flag potential abuse from a likely compromised or misused host. show less	Fraud Orders Phishing Web Spam Email Spam Spoofing Exploited Host

Showing 1 to 3 of 3 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a880:400:d1:0:5:4456:9001

🇺🇸 160.79.106.143

🇻🇳 157.10.186.28

🇳🇬 98.97.76.11

🇺🇸 66.132.195.50

🇹🇭 62.105.204.216

🇰🇷 58.229.240.73

🇧🇪 198.235.24.130

🇵🇰 165.101.119.215

🇭🇰 123.58.219.41

🇵🇭 120.28.109.188

🇨🇳 114.244.220.84

🇹🇼 110.25.110.132

🇩🇪 109.160.32.164

🇧🇷 45.160.112.131

🇧🇷 45.160.112.130

🇺🇸 43.130.150.80

🇳🇱 23.97.182.38

🇰🇷 20.194.0.112

🇺🇸 20.14.94.1