ByStander wrote:
Is Jabriol's crossposting driving you nuts?

You can find Jabriol in person at:

Antonio L. Santana~Candia a.k.a.
3072 Constitution Rd.
Camden NJ

Jabriol's Phone 856 962-9003

He does **NOT** live across the street from the Camden NJ Police
Dept. That was another lie.

Camden Police Departments

Police Building
8th & Federal Sts.
One Police Plaza
Camden, NJ 08103
Phone: 856-757-7400
Fax: 856-757-0145

Camden County
Office of the Sheriff
Mailing Address: P.O. Box 769
Room 100 - Courthouse
520 Market Street
Camden, New Jersey 08101
(856) 225-5470 Fax: (856) 225-5578

Jabriol posts using Google groups, but Google adds the NNTP
posting
IP address of the computer that was used to post from. On
misc.legal Jabriol had 3 separate IP addresses
(dialed up 3 different times). They we

NNTP-Posting-Host: 63.154.80.65
NNTP-Posting-Host: 63.154.80.30
NNTP-Posting-Host: 63.154.80.70

To track the ISP you cut and paste the offending IP address and
trace
it through a service that looks it up.

Samspade is one of those services-
www.samspade.org

Put in the IP address and hit "do stuff"

The result for 63.154.80.65 is below:

Server Used: [ whois.arin.net ]

63.154.80.65 = [
0-1pool80-65.nas15.jersey-city1.nj.us.da.qwest.net ]
OrgName: Qwest Communications
OrgID: QWDL
Address: 950 17th Street
Address: Suite 1900
City: Denver
StateProv: CO
PostalCode: 80202
Country: US
NetRange: 63.152.0.0 - 63.159.255.255
CIDR: 63.152.0.0/13
NetName: QWEST-2BLKS
NetHandle: NET-63-152-0-0-1
Parent: NET-63-0-0-0-0
NetType: Direct Allocation
NameServer: DCA-ANS-01.INET.QWEST.NET
NameServer: SVL-ANS-01.INET.QWEST.NET
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 2000-07-12
Updated: 2000-08-23
TechHandle: QN-ARIN
TechName: NOC
TechPhone: 1-703-363-3001
TechEmail:
OrgAbuseHandle: QIA2-ARIN
OrgAbuseName: Qwest IP Abuse
OrgAbusePhone: 1-877-886-6515
OrgAbuseEmail:
OrgNOCHandle: QIN-ARIN
OrgNOCName: Qwest IP NOC
OrgNOCPhone: 1-877-886-6515
OrgNOCEmail:
OrgTechHandle: QIA-ARIN
OrgTechName: Qwest IP Admin
OrgTechPhone: 1-877-886-6515
OrgTechEmail:

The top part shows where the IP address resolved to, in this case
it
was: 0-1pool80-65.nas15.jersey-city1.nj.us.da.qwest.net

Which indicates it's a dial-up modem pool in Jersey City, New
Jersey.

The owner of that POP (point of presence) is Qwest
Communications.
Now, this is not nessecarily the ISP of who you want to find.
Many
ISP's have agreements with other ISP's allowing dial-in access
for
their customers that may be traveling, for instance. But, since
the
alleged abuse originated at this access point, Qwest
Communications
would be the ones to get any complaints. It's important to note
the
exact time of the incident by forwarding complete headers, that
way
they can go back to the log and see who was connected to the
specific
port at that time. They can find out the user name and caller ID
of
whomever was connected.

Hope this helps

ByStander

~~~~~~~~~~~~~~~~~~~~~
This message was posted via one or more anonymous remailing services.
The original sender is unknown. Any address shown in the From header
is unverified. You need a valid hashcash token to post to groups
other
than alt.test and alt.anonymous.messages. Visit
www.panta-rhei.dyndns.org
for abuse and hashcash info.