ROKSO Home  |  ROKSO FAQs & Policies  |  About Spamhaus  |  FAQs
ROKSO
The Register of Known Spam Operations
Dedicated Professionals / Curtis Tyree / Kayleigh McSwain

Evidence Menu:

Dedicated Professionals / Curtis Tyree / Kayleigh McSwain Index


Country: United States of America
State: FL
Serial netblock hijacking operation out of Jacksonville, Florida. Works under the guise of several "legitimate" hosts, which are then used to announce hijacked netblocks for sending illegal spam. When caught, simply blames everything on fictitious customers.


Dedicated Professionals / Curtis Tyree / Kayleigh McSwain SBL Listings History
Current SBL Listings
Archived SBL Listings

Stolen ASN AS3396 - T G & A


AS3396 is a hijacked ASN stolen by (peered with) AS19531 - Nodes Direct.

It was used to announce these hijacked netblocks:

SBL156868 198.48.16.0/20 - First of America Services
SBL156894 198.151.64.0/18 - Integrated Systems Solutions Corporation
SBL156899 199.26.96.0/19 - Reach Networks
SBL156916 199.89.16.0/20 - Sisters of Charity HealthCare System of Cincinatti, Ohio
SBL156981 199.185.192.0/20 - Tri-Line Freight Systems
SBL106606 199.196.192.0/19 - First NH Banks
SBL156982 199.212.96.0/20 - Kingston General Hospital
SBL156983 199.254.32.0/20 - Wirelss Systems Inc.
SBL156984 204.155.128.0/20 - Interprise Networking Services from U S WEST
SBL156985 205.233.224.0/20 - InfoRamp Inc.
SBL156986 206.209.80.0/20 - Granite Construction Company
SBL156988 207.32.128.0/19 - UNETY Systems, Inc.

A traceroute to these hijacks was routed through:

GORACK-LLC.edge4.Atlanta2.Level3.net (4.28.182.34)

--------------------------------------------------------------------------------

ASNumber: 3396
ASName: EGG
ASHandle: AS3396
RegDate: 1994-02-01
Updated: 1999-02-11
Ref: http://whois.arin.net/rest/asn/AS3396

OrgName: T G & A
OrgId: TGA-2
Address: 32724 Old Bunker Hill Road
City: St Helens
StateProv: OR
PostalCode: 97051
Country: US
RegDate: 1993-10-22
Updated: 2011-09-24
Ref: http://whois.arin.net/rest/org/TGA-2

OrgTechHandle: CKN23-ARIN
OrgTechName: No, Contact Known
OrgTechPhone: +1-800-555-1234
OrgTechEmail: nobody@example.com
OrgTechRef: http://whois.arin.net/rest/poc/CKN23-ARIN

OrgAbuseHandle: TG63-ARIN
OrgAbuseName: Glover, Tom
OrgAbusePhone: +1-503-366-9595
OrgAbuseEmail: tomg@egg.net
OrgAbuseRef: http://whois.arin.net/rest/poc/TG63-ARIN

RTechHandle: TG63-ARIN
RTechName: Glover, Tom
RTechPhone: +1-503-366-9595
RTechEmail: tomg@egg.net
RTechRef: http://whois.arin.net/rest/poc/TG63-ARIN

--------------------------------------------------------------------------------

One of the real netblocks that was legitimately owned by T G & A

NetRange: 198.206.140.0 - 198.206.140.255
CIDR: 198.206.140.0/24
NetName: CUCKOO
NetHandle: NET-198-206-140-0-1
Parent: NET198 (NET-198-0-0-0-0)
NetType: Direct Assignment
OriginAS:
Organization: T G & A (TGA-2)
RegDate: 1993-10-22
Updated: 2002-04-22
Ref: http://whois.arin.net/rest/net/NET-198-206-140-0-1

OrgName: T G & A
OrgId: TGA-2
Address: 32724 Old Bunker Hill Road
City: St Helens
StateProv: OR
PostalCode: 97051
Country: US
RegDate: 1993-10-22
Updated: 2011-09-24
Ref: http://whois.arin.net/rest/org/TGA-2

OrgAbuseHandle: TG63-ARIN
OrgAbuseName: Glover, Tom
OrgAbusePhone: +1-503-366-9595
OrgAbuseEmail: tomg@egg.net
OrgAbuseRef: http://whois.arin.net/rest/poc/TG63-ARIN

OrgTechHandle: CKN23-ARIN
OrgTechName: No, Contact Known
OrgTechPhone: +1-800-555-1234
OrgTechEmail: nobody@example.com
OrgTechRef: http://whois.arin.net/rest/poc/CKN23-ARIN

--------------------------------------------------------------------------------

Registrant:
Foo Bar Internet, Inc.
32724 Old Bunker Hill Road
Saint Helens, OR 97051

Domain Name: FBI.NET

Administrative, Technical Contact:
Glover, Tom tomg@EGG.NET
TG&A
32724 Old Bunker Hill Road
St Helens, OR 97051
(503) 329-8709 (503) 261-4805 (FAX) (503) 366-9595

Record last updated on 18-Jul-2001
Record expires on 02-May-2003
Record created on 01-May-1995
Database last updated on 11-Jan-2002 15:00:24 EST

Domain servers in listed order:

CUCKOO.EGG.NET 198.206.140.125
GOOSE.EGG.NET 204.245.195.29

--------------------------------------------------------------------------------

http://egov.sos.state.or.us/br/pkg_web_name_srch_inq.show_detl?p_be_rsn=1145242&p_srce=BR_INQ&p_print=FALSE

Registry Nbr 327428-92
Registry Date 01-18-2006
Entity Name T G & A

Addr 1 32724 OLD BUNKER HILL RD
CSZ SAINT HELENS OR 97051

Type REP AUTHORIZED REPRESENTATIVE
Name MELINDA D GLOVER

FAILURE TO RENEW 01-19-2008

--------------------------------------------------------------------------------


The Register of Known Spam Operations (ROKSO) collates information and evidence on entities with a history of spamming or providing spam services, and entities affiliated or otherwise connected with them, for the purpose of assisting ISP Abuse Desks and Law Enforcement Agencies.
The address of this ROKSO record is: https://www.spamhaus.org/rokso/evidence/ROK10987/

The above consists of information in the public domain. The Spamhaus Project makes every effort to avoid errors in information in the ROKSO database, and will correct any errors as soon as it is able to verify the correction, but accepts no responsibility or liability for any errors or omissions, or liability for any loss or damage, consequential or otherwise, incurred in reliance on the material in these pages. The Spamhaus Project makes no warranties or representations as to the accuracy of the Information in ROKSO records. The information in the ROKSO database is for information purposes only and is not intended as legal advice of any kind.

For information on contacting the ROKSO Team regarding any factual errors in this record, see the ROKSO FAQs.
© 1998-2019 The Spamhaus Project SLU. All rights reserved.
Legal  |  Privacy