🚀 go-pugleaf

On Mon, 22 Dec 2003 17:22:26 -0500, kstahl wrote:

> Well, if he is in British Columbia, perhaps he is assisting the 
> RCMP with their inquires long about now.

He's probably in the U.S., and he's probably using a UNIX shell account or
something to look like he's from elsewhere. The domain is registered to
someone in British columbia:

Domain ID:D3992149-LROR
Domain Name:YI.ORG
Created On:01-Mar-1999 05:00:00 UTC
Last Updated On:15-Nov-2003 18:02:39 UTC
Expiration Date:01-Mar-2004 05:00:00 UTC
Sponsoring Registrar:R39-LROR
Status:CLIENT TRANSFER PROHIBITED
Registrant ID:01A423D0B92564B0
Registrant Name:Tyler MacDonald
Registrant Organization:Crackerjack Networking Solutions
Registrant Street1:PO Box 8678
Registrant City:Victoria
Registrant State/Province:BC
Registrant Postal Code:V8X 1C1
Registrant Country:CA
Registrant Email:dns@whyI.org
Admin ID:01A423D0B92564B0
Admin Name:Tyler MacDonald
Admin Organization:Crackerjack Networking Solutions
Admin Street1:PO Box 8678
Admin City:Victoria
Admin State/Province:BC
Admin Postal Code:V8X 1C1
Admin Country:CA
Admin Email:dns@whyI.org
Tech ID:01A423D0B92564B0
Tech Name:Tyler MacDonald
Tech Organization:Crackerjack Networking Solutions
Tech Street1:PO Box 8678
Tech City:Victoria
Tech State/Province:BC
Tech Postal Code:V8X 1C1
Tech Country:CA
Tech Email:dns@whyI.org
Name Server:CONNUBIALIS.CRACKERJACK.NET
Name Server:FUMO-VIRIDUS.CRACKERJACK.NET
 
The machine apparently responsible had an IP address of 80.65.224.85. Here
is it's whois. The IP block is in western Europe:

OrgName:    RIPE Network Coordination Centre
OrgID:      RIPE
Address:    Singel 258
Address:    1016 AB
City:       Amsterdam
StateProv:
PostalCode:
Country:    NL

ReferralServer: whois://whois.ripe.net

NetRange:   80.0.0.0 - 80.255.255.255
CIDR:       80.0.0.0/8
NetName:    80-RIPE
NetHandle:  NET-80-0-0-0-1
Parent:
NetType:    Allocated to RIPE NCC
NameServer: NS.RIPE.NET
NameServer: NS3.NIC.FR
NameServer: SUNIC.SUNET.SE
NameServer: AUTH62.NS.UU.NET
NameServer: SEC1.APNIC.NET
NameServer: SEC3.APNIC.NET
NameServer: TINNIE.ARIN.NET
Comment:    These addresses have been further assigned to users in
Comment:    the RIPE NCC region. Contact information can be found in
Comment:    the RIPE database at http://www.ripe.net/whois
RegDate:
Updated:    2003-09-19

OrgTechHandle: RIPE-NCC-ARIN
OrgTechName:   RIPE NCC Hostmaster
OrgTechPhone:  +31 20 535 4444
OrgTechEmail:  search-ripe-ncc-not-arin@ripe.net

# ARIN WHOIS database, last updated 2003-12-21 19:15
# Enter ? for additional hints on searching ARIN's WHOIS database.
% This is the RIPE Whois server.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/ripencc/pub-services/db/copyright.html

inetnum:      80.65.224.0 - 80.65.227.255
netname:      NERIM-ADSL-FT-20010510
descr:        IP blocs for individual ADSL accesses via
descr:        France Telecom (Netissimo).
country:      FR
admin-c:      RB7192-RIPE
tech-c:       RB7192-RIPE
status:       ASSIGNED PA
notify:       ripe@nerim.net
mnt-by:       NERIM-MNT
changed:      hostmaster@ripe.net 20010515
source:       RIPE

route:        80.65.224.0/20
descr:        NERIM-80-65
origin:       AS13193
mnt-by:       NERIM-MNT
changed:      bouaziz@nerim.net 20010515
source:       RIPE

person:       Raphael Bouaziz
address:      Nerim
address:      15 rue d'Aboukir
address:      75002 Paris
address:      France
phone:        +33 1 44 82 07 17
fax-no:       +33 1 44 82 07 16
e-mail:       bouaziz@nerim.net
nic-hdl:      RB7192-RIPE
mnt-by:       ISDNET-NOC
changed:      bouaziz@nerim.net 19991201
changed:      theimes@de.cw.net 20021120
source:       RIPE



> I have to wonder whether the phone number is one of his perceived
> enemies and he thought the authorities wouldn't be able to figure that
> out quickly.