ROKSO Home  |  ROKSO FAQs & Policies  |  About Spamhaus  |  FAQs
ROKSO
The Register of Known Spam Operations
Dedicated Professionals / Curtis Tyree / Kayleigh McSwain

Evidence Menu:

Dedicated Professionals / Curtis Tyree / Kayleigh McSwain Index


Country: United States of America
State: FL
Serial netblock hijacking operation out of Jacksonville, Florida. Works under the guise of several "legitimate" hosts, which are then used to announce hijacked netblocks for sending illegal spam. When caught, simply blames everything on fictitious customers.


Dedicated Professionals / Curtis Tyree / Kayleigh McSwain SBL Listings History
Current SBL Listings
Archived SBL Listings

Main Info


This gang runs "legitimate" hosting companies which are then used for hijacking netblocks to lease out for illegal spamming purposes.

Gang members:

Curtis W. Tyree
Kayleigh Tyree AKA Kayleigh McSwain AKA Amber McClain AKA Amber Mallard
Daniel B. Stephens

https://www.linkedin.com/in/curtis-tyree-90548a43

https://www.linkedin.com/pub/kayleigh-mcswain/51/488/933


Company names:

DEDICATED PROFESSIONALS, LLC
NODES DIRECT HOLDINGS, LLC
OIVIO HOLDINGS LLC
PEAK EDGE CONSULTING, LLC
BLUE PEAK CONSULTING, LLC
RIVER CITY RETAIL, LLC
SERVER COMPLETE, LLC

--------------------------------------------------------------------------------

LIST OF HIJACKED NETBLOCKS

--------------------------------------------------------------------------------

2015-01-01

AS16555 itself looks stolen, was "Medicine Shoppe International"

Hijacked by AS16555 through AS3491 (It's only peering with AS3491 - PCCW Global)

SBL245914 192.160.236.0/24 - Firehouse Network Consulting, Inc.
SBL245072 192.226.16.0/20 - Texas Instructments SPDC
SBL177843 198.45.64.0/20 - National Photographic Interpretation Center (US Government Owned - CIA)
SBL244694 198.151.16.0/20 - Measurex MSD
SBL245070 199.253.32.0/20 - Vista Unified School District

--------------------------------------------------------------------------------

2014-12-12

Hijacked by AS42708 - Portlane Networks AB

SBL179271 198.187.64.0/18 - Caremark Prescription Service Division
SBL179270 199.249.64.0/19 - Livonia Public Schools
SBL96702 199.84.64.0/19 - ABL Canada Inc.
SBL105808 204.106.128.0/18 - Egghead Software
SBL180437 205.151.128.0/19 - DMR Group Inc.
SBL104251 205.203.224.0/19 - Reliance Comm/Tec
SBL104252 205.214.96.0/19 - STAR Network
SBL96696 206.227.64.0/18 - Automobile Club of Southern California
SBL177686 207.110.128.0/18 - Wawa Inc.
SBL104254 207.183.192.0/19 - ParaGraph International Corp.
SBL180438 209.66.128.0/19 - Connix

--------------------------------------------------------------------------------

2013-04-09

Hijacked by AS26044 - Dedicated Professionals, LLC

SBL182423 206.127.192.0/19 - Web Professionals, Inc.
SBL182424 207.230.96.0/19 - Web Professionals, Inc.

--------------------------------------------------------------------------------

2013-01-01

Hijacked by AS10753 (Level3 <- Giglinx <- Server Complete)

SBL178647 167.74.0.0/18 - LIBERTY HEALTH
SBL245078 198.13.32.0/19 - Quicksilver Express Courier, Inc.
SBL179291 198.14.128.0/18 - Franklin Resources, Inc.
SBL180206 198.176.64.0/19 - Matthew Bender & Co., Inc.
SBL178649 198.178.64.0/19 - Phillips Plastics Corporation
SBL180443 198.181.32.0/20 - Imperial Credit Industries, Inc.
SBL179269 198.184.64.0/18 - Hilliard Lyons Inc.
SBL179271 198.187.64.0/18 - Caremark Prescription Service Division
SBL245081 198.35.64.0/18 - Johnson Controls
SBL177843 198.45.64.0/19 - National Photographic Interpretation Center (US Govt - CIA)
SBL178648 198.56.64.0/18 - AdValue Network
SBL182420 199.190.64.0/18 - DataXchange Network, Inc
SBL245082 199.200.128.0/18 - COVIDIEN LP
SBL180441 199.223.0.0/20 - US Leasing, Inc.
SBL179270 199.249.64.0/19 - Livonia Public Schools
SBL180442 199.253.224.0/20 - Straub Clinic & Hospital
SBL245086 199.27.32.0/19 - Bowater Communications Papers Inc.
SBL173903 199.84.96.0/19 - Donohue Inc
SBL245087 204.156.32.0/19 - Willamette Industries, Inc.
SBL103685 204.232.0.0/18 - 2020Net, Inc.
SBL245090 204.61.160.0/19 - Mental Health, Mental Retardation & Substance Abuse Services
SBL180437 205.151.128.0/19 - DMR Group Inc.
SBL245091 205.175.64.0/19 - Memphis Hospital Service and Surgical Assoc.
SBL180439 206.195.224.0/19 - Thrift Drug, Inc.
SBL180440 206.210.32.0/19 - Crown Vantage Corporation
SBL177387 206.226.0.0/18 - L'Air Liquide, S.A.
SBL177686 207.110.128.0/18 - Wawa Inc.
SBL177484 207.110.64.0/18 - Mitsubishi Int'l Corp
SBL244963 207.177.128.0/18 - General Internet, Inc.
SBL244962 207.201.0.0/18 - Vaultline Inc.
SBL245088 207.201.64.0/18 - Celestar
SBL245089 207.45.0.0/19 - Cox California PCS
SBL245092 209.131.128.0/18 - Intex-Net, Inc.
SBL245093 209.163.0.0/18 - Rural Connections
SBL245094 209.182.0.0/18 - Colossus
SBL180438 209.66.128.0/19 - Connix

--------------------------------------------------------------------------------

2012-07-19

Announced by AS36352 on behalf of "Blue Peak Consulting" (forged LOA / wire fraud)

SBL181088 204.86.16.0/20 - Hoffman Engineering

--------------------------------------------------------------------------------

2012-07-07

Announced by AS29802 on behalf of "Blue Peak Consulting" (forged LOA / wire fraud)

SBL263403 204.78.16.0/20 - Central Maine Power Company (CMP-1)

--------------------------------------------------------------------------------

2012-06-25

Announced by AS20454 on behalf of "Blue Peak Consulting" (forged LOA / wire fraud)

SBL147763 199.71.192.0/20 - Phillips Cables Ltd.

--------------------------------------------------------------------------------

2012-06-13

Hijacked by AS3396 - T G & A (peering with AS19531 - Nodes Direct)

Routed through GORACK-LLC.edge4.Atlanta2.Level3.net (4.28.182.34) (Curtis Tyree is COO of Gorack)

SBL104616 205.203.0.0/19 - Alex, Brown & Sons Incorporated
SBL156868 198.48.16.0/20 - First of America Services
SBL156894 198.151.64.0/18 - Integrated Systems Solutions Corporation
SBL156899 199.26.96.0/19 - Reach Networks
SBL156916 199.89.16.0/20 - Sisters of Charity HealthCare System of Cincinatti, Ohio
SBL156981 199.185.192.0/20 - Tri-Line Freight Systems
SBL156998 204.225.16.0/20 - United States Steel Corporation
SBL106606 199.196.192.0/19 - First NH Banks
SBL156982 199.212.96.0/20 - Kingston General Hospital
SBL156983 199.254.32.0/20 - Wirelss Systems Inc.
SBL156984 204.155.128.0/20 - Interprise Networking Services from U S WEST
SBL156985 205.233.224.0/20 - InfoRamp Inc.
SBL156986 206.209.80.0/20 - Granite Construction Company
SBL156988 207.32.128.0/19 - UNETY Systems, Inc.
SBL301221 198.206.140.0/24 - T G & A
SBL301222 199.241.64.0/19 - Ogden Environmental and Energy Services
SBL301223 204.130.16.0/20 - CSDC

--------------------------------------------------------------------------------

2011-03-27

Hijacked by AS8143, downstream of AS19844 (GoRack - where Curtis Tyree is COO)

SBL106606 199.196.192.0/19 - First NH Banks
SBL109260 200.107.216.0/21 - AMERICATEL GUATEMALA, S.A.

--------------------------------------------------------------------------------

2010-09-04

Hijacked by AS27626 (Joytel - where Curtis Tyree is COO)

SBL96643 192.100.134.0/24 - SOFTBANK America, Inc.
SBL96644 192.100.143.0/24 - Tanner Research, Inc.
SBL96641 192.100.5.0/24 - Zitel Corporation
SBL96642 192.100.88.0/24 - Cornerstone Research
SBL96645 192.101.177.0/24 - Entre Computer Center
SBL96646 192.101.187.0/24 - Chesapeake Computer Consultants Incorporated
SBL96709 198.143.128.0/19 - ITOCHU Technology, Inc.
SBL96708 198.183.32.0/19 - Kaiser Permanente Sacramento
SBL96707 198.210.32.0/19 - Candle Corporation
SBL96706 198.241.64.0/18 - Martin Marietta Corporation
SBL96705 198.252.64.0/18 - Wall Data
SBL96701 199.198.160.0/19 - Ault Foods Ltd.
SBL96704 199.34.128.0/18 - MicroAge Computer Centers, Inc.
SBL96703 199.46.32.0/19 - TRW Financial Systems, Inc.
SBL96745 199.5.152.0/23 - Acoustic Imaging Technology Corporation
SBL96702 199.84.64.0/19 - ABL Canada Inc.
SBL96699 204.107.208.0/24 - TEAM INFINITY
SBL96747 204.126.244.0/23 - GMIS, Inc.
SBL96700 204.48.64.0/19 - Shared Market Insurance Services, Inc.
SBL96744 204.63.144.0/21 - Great Falls Public School District
SBL96698 205.144.0.0/20 - Unity Health Network
SBL96743 205.172.244.0/22 - In-Flight Phone Corporation
SBL96697 206.224.160.0/19 - Fleet Mortgage Group
SBL96696 206.227.64.0/18 - Automobile Club of Southern California
SBL96694 216.245.64.0/18 - Inchcape Shipping Services
SBL96695 216.49.0.0/18 - SuperBusiness NET, Inc.
SBL181024 24.230.0.0/19 - Befera Interactive Cablenet

--------------------------------------------------------------------------------

For further reading:

"Ongoing ASN and IP Space Hijacks: Update (TimeWarner/Level3/Tiscali)"

https://mailman.nanog.org/pipermail/nanog/2011-April/035556.html

"AS27626, AS6061, AS10392, AS11296 - Hijacks Gone Wild!"

https://mailman.nanog.org/pipermail/nanog/2010-October/025997.html

--------------------------------------------------------------------------------


The Register of Known Spam Operations (ROKSO) collates information and evidence on entities with a history of spamming or providing spam services, and entities affiliated or otherwise connected with them, for the purpose of assisting ISP Abuse Desks and Law Enforcement Agencies.
The address of this ROKSO record is: https://www.spamhaus.org/rokso/evidence/ROK10155/

The above consists of information in the public domain. The Spamhaus Project makes every effort to avoid errors in information in the ROKSO database, and will correct any errors as soon as it is able to verify the correction, but accepts no responsibility or liability for any errors or omissions, or liability for any loss or damage, consequential or otherwise, incurred in reliance on the material in these pages. The Spamhaus Project makes no warranties or representations as to the accuracy of the Information in ROKSO records. The information in the ROKSO database is for information purposes only and is not intended as legal advice of any kind.

For information on contacting the ROKSO Team regarding any factual errors in this record, see the ROKSO FAQs.
© 1998-2019 The Spamhaus Project SLU. All rights reserved.
Legal  |  Privacy