Based on research, analysis of network data, our ‘snowshoe’ spam detection systems, intelligence sources and our experience, Spamhaus believes that this IP address range is being used or is about to be used for the purpose of high volume ‘snowshoe’ spam emission.
As a precaution therefore we are listing this IP range in an SBL Advisory for the protection of Spamhaus users until we are able to determine the extent of the problem in this IP range, the exact size of the problematic IP allocation within this IP range, who is operating the domains/hosts/servers in this IP range, and receive a reassurance from the network owner that the IP range does not and will not pose a threat to Spamhaus users.
—
This entire network appears to be operating under the illusion that it is «free.fr»
It is not. There are a large number of networks, mainly on OVH doing exactly the same thing.
Note, this one is 100 and 103. although there is a different spammer on
51.68.101.112 tmiuvq.com
51.68.101.113 tmiuvq.com
51.68.101.114 tmiuvq.com
51.68.101.115 tmiuvq.com
51.68.101.116 tmiuvq.com
51.68.101.117 tmiuvq.com
51.68.101.118 tmiuvq.com
51.68.101.119 tmiuvq.com
51.68.101.120 tmiuvq.com
51.68.101.121 tmiuvq.com
51.68.101.122 tmiuvq.com
51.68.101.123 tmiuvq.com
DNS
the usual IP### . ip-XXX-YYY-ZZZ.eu
HELO
51.68.100.140 free.fr
51.68.100.141 free.fr
51.68.100.142 free.fr
51.68.100.143 free.fr
51.68.100.144 free.fr
51.68.100.145 free.fr
51.68.100.146 free.fr
51.68.100.147 free.fr
51.68.100.148 free.fr
51.68.100.149 free.fr
51.68.100.150 free.fr
51.68.103.60 free.fr
51.68.103.61 free.fr
51.68.103.62 free.fr
51.68.103.63 free.fr
51.68.103.64 free.fr
51.68.103.65 free.fr
51.68.103.66 free.fr
51.68.103.67 free.fr
51.68.103.68 free.fr
51.68.103.69 free.fr
51.68.103.70 free.fr