ESP Mailerlite is sending spam to email addressees scraped from Whois records, advertising SEO and web development services. The sending iP addresses in this range appear in both /29s of the /28, so we are listing the /28.
Mailerlite: Please terminate all accounts used by this spam operation.
SENDING IPs:
51.222.173.102 mta11.mlsends.com
51.222.173.103 mta12.mlsends.com
51.222.173.104 mta14.mlsends.com
51.222.173.105 mta13.mlsends.com
51.222.173.106 mta15.mlsends.com
51.222.173.107 mta16.mlsends.com
51.222.173.108 mta17.mlsends.com
SPAM SAMPLE:
Received: from mta02.mlsends.com (mta15.mlsends.com [51.222.173.106])
Date: Fri, 3 Dec 2021 08:##:## -0500
From: Newsletter <updates@mta15.mlsends.com>
Reply-To: Newsletter <updates@mta15.mlsends.com>
Subject: <x> Hire Professional E-Commerce Web Designers
<snip>
Professional E-Commerce Website Building for Businesses All Over the Planet
Need something different like custom WordPress web designs? Look no further. Our team of Expert website designers are enough to take over your project. Additionally, our WordPress website designers also look over the web maintenance after the project is completed. Our web design and building team thinks hugely different when it comes to making gorgeous web interfaces. Click to [ Reach us today and discuss your website design or development project ].
[[ https://mta02.mlsends.com/r/<x> ]]
<snip>
# start
NetRange: 51.222.0.0 — 51.222.255.255
CIDR: 51.222.0.0/16
NetName: HO-2
NetHandle: NET-51-222-0-0-1
Parent: RIPE-ERX-51 (NET-51-0-0-0-1)
NetType: Direct Allocation
OriginAS:
Organization: OVH Hosting, Inc. (HO-2)
RegDate: 2020-03-31
Updated: 2020-03-31
Ref: https://rdap.arin.net/registry/ip/51.222.0.0
OrgName: OVH Hosting, Inc.
OrgId: HO-2
Address: 800-1801 McGill College
City: Montreal
StateProv: QC
PostalCode: H3A 2N4
Country: CA
RegDate: 2011-06-22
Updated: 2017-01-28
Ref: https://rdap.arin.net/registry/entity/HO-2
OrgTechHandle: NOC11876-ARIN
OrgTechName: NOC
OrgTechPhone: +1-855-684-5463
OrgTechEmail: noc@ovh.net
OrgTechRef: https://rdap.arin.net/registry/entity/NOC11876-ARIN
OrgAbuseHandle: ABUSE3956-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-855-684-5463
OrgAbuseEmail: abuse@ovh.ca
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE3956-ARIN
# end
# start
NetRange: 51.222.173.0 — 51.222.173.255
CIDR: 51.222.173.0/24
NetName: OVH-DEDICATED-FO
NetHandle: NET-51-222-173-0-1
Parent: HO-2 (NET-51-222-0-0-1)
NetType: Reassigned
OriginAS: AS16276
Organization: OVH Hosting, Inc. (HO-2)
RegDate: 2021-02-24
Updated: 2021-02-24
Comment: Failover IPs
Ref: https://rdap.arin.net/registry/ip/51.222.173.0
OrgName: OVH Hosting, Inc.
OrgId: HO-2
Address: 800-1801 McGill College
City: Montreal
StateProv: QC
PostalCode: H3A 2N4
Country: CA
RegDate: 2011-06-22
Updated: 2017-01-28
Ref: https://rdap.arin.net/registry/entity/HO-2
OrgTechHandle: NOC11876-ARIN
OrgTechName: NOC
OrgTechPhone: +1-855-684-5463
OrgTechEmail: noc@ovh.net
OrgTechRef: https://rdap.arin.net/registry/entity/NOC11876-ARIN
OrgAbuseHandle: ABUSE3956-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-855-684-5463
OrgAbuseEmail: abuse@ovh.ca
OrgAbuseRef: https://rdap.arin.net/registry/entity/ABUSE3956-ARIN
# end