smartthing14 Posted September 4, 2014 Posted September 4, 2014 Daniel Alvarez Cooper, Kevin Bever, Rob McGee, Craig Ames and Blake Corbin and Paul Eugene Gumos are some names associated with distributing spam messages. They use numerous IP classes obtained from Romania through the LIR jump.ro: www.spamhaus.org/rokso/sbl_archieved/SPM1287/daniel-alvarez-convex-marketing www.spamhaus.org/rokso/sbl_archieved/SPM1320/rr-media-kevin-bever Including Romania on top positions in spammers’ list is due to JUMP, headed by Cristi Haja. According to RIPE statistics, he administrates around 4 million IPs - more than the main national providers: RCS&RDS, UPC and Romtelecom. Most of IPs are created for spamming activities: 89.37.218.0/23 (SBL205243) 89.36.192.0/24 (SBL205637) 93.118.35.0/24 (SBL205402) 89.36.50.0/23 (SBL204554)
edmond Posted September 9, 2014 Posted September 9, 2014 If we analyze the ASs and companies through which IPs are announced, we will identify the same persons/companies from Romania: SSNet, Nav Telecom, Adnet Net Telecom, respectively Bucurescu, Stanciu, Moldoveanu, Berar, Porumb, all of them Haja’s preferred customers.
joedean Posted September 10, 2014 Posted September 10, 2014 SSNet became notorious for many frauds achieved at the expense of customers, taking their money, but never providing the promised services. In addition, it used their data for various other “business†on Internet: www.arenaweb.ro/diverse/ssnet-ro-se-duce-de-rapa www.gazduire.info/index.php?topic=4208.0
lisati Posted September 11, 2014 Posted September 11, 2014 <side note> The only SSNet I know of is a religious organization based in the USA. edit: probably not the shared hosting company mentioned in previous posts in this thread. </side note>
shield Posted September 26, 2014 Posted September 26, 2014 SBL205243 announces the use of 89.37.218.0/23 class in spamming. AS48118 belongs to Telecom Hosting (www.bgp.he.net/AS48118), having as contact person: Hreceniuc Vlad. In fact, the company belongs to Alexandru Andrei Stanciu, who also takes IPs from Cristian Haja: www.vrajitorul.eu/firma/28205626/telecom-hosting-srl The same applies for Booming Host, Costy Data Service, Cluster Hosting, Creativity RPM, Bucovina Network, Roaxess Nord, RoSite Equipment, Speedconnecting etc.
Recommended Posts
Archived
This topic is now archived and is closed to further replies.