Subj : So Roy Witt is your hero?
To   : All
From : Ross Cassell
Date : Sat Nov 30 2002 04:53 pm

* Originally in FN_SYSOP
* Crossposted in MODERATOR
* Crossposted in FIDONEWS
* Crossposted in Z1REGCON

Hello All!

We have been through this before with Roy.

I saw a user posting on my BBS come in via TELNET, I didnt see the log on 
sequence, but I saw him enterring messages that resembled the Roy Witt 
Vernacular. I knocked the user off, apparently not in time for him to have 
gotten 4 messages into the MODERATOR echo... I am not gonna just come out here 
and just tell you he did it, I will post the proof.

All my TELNET nodes create a SPY file, it creates a record of every keypress 
made by a user. I also have a LOG file. Roy Witt logged on as a DAN CEPPAHOLE, 
which many of you should remember as how he always referred to Dan Ceppa as..

First the LOG file:

=== Cut ===
021130 16:21 --------------------------
021130 16:21 CONNECT TCPIP/66.74.201.60:3014
021130 16:22 BogusLogin: Ceppa Hole
021130 16:22 Login: Dan Ceppahole
021130 16:23 New user, #37
021130 16:23 Address:  fuck you
021130 16:23 City:     usofa
021130 16:23 Phone:    hahaha
021130 16:23 Birthday: 00-00-00
...
[snip]
...
What is snipped was just the messages BBBS displays to new users, inviting them 
to the message areas.

021130 16:27 MODERATOR message 1677 entered
021130 16:28 MODERATOR message 1678 entered
021130 16:30 MODERATOR message 1679 entered
021130 16:31 MODERATOR message 1680 entered
=== Cut ===

He was in the middle of type message # 5 when I caught him.

Please note the IP address of 66.74.201.60, after knocking him off the BBS, I 
did an immediate ping and tracert to that IP, no response to PING, he either is 
blocking ICMP packets or realized he had been caught and shut down his machine.

Here is Roys NODELISTING,,


=== Cut ===
Hold,22,rex22.dyndns.org,Santa_Ysabel_CA,Roy_Witt,-Unpublished-,300,MO,IBN,IEM: 
xsyp22@yahoo.com,RVIA:1:379/1
=== Cut ===

Please note the rex22.dyndns.org

I pinged it, and it resolved to:

=== Cut ===
Pinging rex22.dyndns.org [66.74.201.60] with 32 bytes of data:
=== Cut ===

Roys IP

The same IP as in the log file..

As I was typing /this/ message, the BBBS daemon indicated I had a user on HTTP, 
I logged on HTTP to see who was on and it was the same user name, different IP.

64.140.46.68 .. Shithead is stupid..

(and yes I am pissed, most of you defended the son of a bitch for sending virus 
to Kent aand some of the other stuff he has done)

Here is the SPY log:

=== Cut ===
16:22 DAN CEPPAHOLE: fuck you
16:22 DAN CEPPAHOLE: usofa
16:22 DAN CEPPAHOLE: hahaha
16:23 DAN CEPPAHOLE: 00-00-00
30th November, 2002 at 16:23
16:23 DAN CEPPAHOLE: w
16:23 DAN CEPPAHOLE: ?
16:24 DAN CEPPAHOLE: j
16:24 DAN CEPPAHOLE: j
16:26 DAN CEPPAHOLE: r
16:26 DAN CEPPAHOLE: ?
16:26 DAN CEPPAHOLE: RE
16:26 DAN CEPPAHOLE: Deja Vu
16:27 DAN CEPPAHOLE: Suppose he knows that you suck my dick?
16:27 DAN CEPPAHOLE: save
16:27 DAN CEPPAHOLE: re
16:27 DAN CEPPAHOLE: Deja Vu
16:28 DAN CEPPAHOLE: Looks like it's stupid you who is asking stupid questions, 
again.
16:28 DAN CEPPAHOLE: s
16:29 DAN CEPPAHOLE: re
16:29 DAN CEPPAHOLE: Deja Vu
16:30 DAN CEPPAHOLE: Reminds you of my little dick, does it?
16:30 DAN CEPPAHOLE: s
16:31 DAN CEPPAHOLE: re
16:31 DAN CEPPAHOLE: Deja Vu
16:31 DAN CEPPAHOLE: The only boy here is you. Down on your knees again, Boy!
16:31 DAN CEPPAHOLE: s
16:32 DAN CEPPAHOLE: re
16:32 DAN CEPPAHOLE: Deja Vu
16:32 DAN CEPPAHOLE: Reminds you of your daddy doesn't it.  Next thing you 
know, you'll
16:32 DAN CEPPAHOLE: claim that you're a legitimate child of a marriage. 
Course, between
=== Cut ===

as you can see, its the between word when he lost his connection here..


Roy go fuck yourself you piece of shit!

==
Ross
BBS -> http://www.the-estar.com - telnet://the-estar.com
rosscassell@mailshell.com | ICQ = 5305939
.... CCITT: Can't Certify I Trust Telecom.
--- GoldED+/W32 1.1.5-21006
 * Origin: The Eastern Star (1:123/456)

.