Jump to content

Big LIR Spammer


smartthing14
 Share

Recommended Posts

Daniel Alvarez Cooper, Kevin Bever, Rob McGee, Craig Ames and Blake Corbin and Paul Eugene Gumos are some names associated with distributing spam messages. They use numerous IP classes obtained from Romania through the LIR jump.ro:

www.spamhaus.org/rokso/sbl_archieved/SPM1287/daniel-alvarez-convex-marketing

www.spamhaus.org/rokso/sbl_archieved/SPM1320/rr-media-kevin-bever

Including Romania on top positions in spammers’ list is due to JUMP, headed by Cristi Haja. According to RIPE statistics, he administrates around 4 million IPs - more than the main national providers: RCS&RDS, UPC and Romtelecom. Most of IPs are created for spamming activities:

89.37.218.0/23 (SBL205243)

89.36.192.0/24 (SBL205637)

93.118.35.0/24 (SBL205402)

89.36.50.0/23 (SBL204554)

Link to comment
Share on other sites

If we analyze the ASs and companies through which IPs are announced, we will identify the same persons/companies from Romania: SSNet, Nav Telecom, Adnet Net Telecom, respectively Bucurescu, Stanciu, Moldoveanu, Berar, Porumb, all of them Haja’s preferred customers.

Link to comment
Share on other sites

SSNet became notorious for many frauds achieved at the expense of customers, taking their money, but never providing the promised services. In addition, it used their data for various other “business†on Internet:

www.arenaweb.ro/diverse/ssnet-ro-se-duce-de-rapa

www.gazduire.info/index.php?topic=4208.0

Link to comment
Share on other sites

<side note>

The only SSNet I know of is a religious organization based in the USA.

edit: probably not the shared hosting company mentioned in previous posts in this thread.

</side note>

Edited by lisati
Link to comment
Share on other sites

  • 3 weeks later...

SBL205243 announces the use of 89.37.218.0/23 class in spamming. AS48118 belongs to Telecom Hosting (www.bgp.he.net/AS48118), having as contact person: Hreceniuc Vlad. In fact, the company belongs to Alexandru Andrei Stanciu, who also takes IPs from Cristian Haja: www.vrajitorul.eu/firma/28205626/telecom-hosting-srl

The same applies for Booming Host, Costy Data Service, Cluster Hosting, Creativity RPM, Bucovina Network, Roaxess Nord, RoSite Equipment, Speedconnecting etc.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

×
×
  • Create New...