Needed: Tinfoil Hat Techies!

[LeftCoast]

Please help. I was looking at Drudge and followed a link to a picture of Graham getting out of *gasp* a Jaguar. Personally, I don't see what the big deal is...but here's the thing. I noticed that the picture is housed at: 65.172.162.80

The full link is: http://65.172.162.80/graham(.)jpg remove the ()

I'd like to find out who these people are. Is the pic housed on a Repub server or what. It's probably on some dude's home server in Dubuqe, but it could be interesting. I just don't know how, to do it, or if you could even find anything out. Anyone want to help? Please? :)

[ParanoidPat]

1. Not Dubuqe.....

....Target: 65.172.162.80

Date: 7/16/03 (Wednesday), 8:11:27 PM
gi-cha-core1-3-6-1.smartechcorp.net
17 8 - 65.172.162.80 Chattanooga 35.044N 85.311W


No registrant info available! :shrug:

[PunkinPi]

2. I neotraced it to be in Chattanooga, TN.

Registrant info not showing.

[MrPrax]

3. This is all I came up with

Sprint SPRINTLINK-2-BLKS (NET-65-160-0-0-1)
65.160.0.0 - 65.174.255.255

SMARTECH CORPORATION FON-1101832704913981 (NET-65-172-162-0-1)
65.172.162.0 - 65.172.163.255

Smartech Corporation SMARTECHCORP-65-172-162-0-127 (NET-65-172-162-0-2)
65.172.162.0 - 65.172.162.127

http://www.smartechcorp.net/

Smartech Corporation
Chattanooga, TN 37401

[Poll_Blind]

5. I get the Atlanta for the actual machine hosting the image.

After my packets scoot down into Earth orbit, Cosmos 2340 relays them through a series of trunks owned by UUNET in Virginia. From there the packets meander over to Georgia and then onto BellSouth's network where they wind up somewhere in Atlanta. That's where the actual machine that has the IP address appears to be.

PB

[Az]

7. Once it hits Smartech

It goes into secured router land. Thats why the trace goes dead. Without knowing their infrastructure the actual PC could be anywhere.

Hmm, wonder what else is in that subnet.

[Az]

9. Possible link

Scanned the subnet and found besides the Smartechcorp stuff the ~100 sub is split between them and airnetgroup. This is the host behind Wireless in the Park.

[Az]

10. Paydirt

Sitting at 65.172.162.67 is ... ok get this... mail5.rnc.org . I think we found the RNC intranet.

[Az]

4. Whoever it is

Its a corporate site of some sort. The ISP is a Corporate IT network support company.
As to the host system itself. Its a Win 2K box. It is serving mail(pop3) as well as Http and Secured Http. It is also set up for terminal services. Looks like its behind a pretty secure firewall with port forwarding for http and pop3.

This is a professional site.

[Merlin]

6. Hey Az!

Didn't know you were a fellow techie!
:hi:

[Az]

8. Sysadmin

With security as one of my hats. Hail fellow Techie!

[LeftCoast]

11. You guys are AMAZING!

[dweller]

12. he's standing in a traffic jam

beside a jag, another car, there are p/u trucks, tow trucks, etc around him, and lot's of other people that probably didn't get 'out' of the car with him.... why would this be a big deal?
Cantos bookstore is in arlington, va. Maybe you could ask Graham what he rode into town on.

disinfo is abound on the web. keep Occam's Razor as your touchstone.

my Pov.
dp

[tridim]

13. Looks to me like it's an RNC spam relay

http://groups.google.com/groups?q=%22mail5.rnc.org%22&hl=en&lr=&ie=UTF-8&newwindow=1&safe=off&selm=3D2EE675.8B28D76B%40erols.com&rnum=1