209.17.128.161

[colored_way]

In "CVS Probes Card Breach at Online Photo Unit" we read: "Someone also edited PNI’s Wikipedia page to remove client information".

The editing was made from IP address 209.17.128.161. https://en.wikipedia.org/w/index.php?title=PNI_Digital_Media&diff=prev&oldid=671782651

The owner of 209.17.128.161 is Bell Canada http://myip.ms/info/whois/209.17.128.161

Project Honey Pot detected spam from IP 209.17.128.161 sent by a username "dendfjfsaffdj". http://www.projecthoneypot.org/ip_209.17.128.161

Another Honey Pot record shows the username "dendfjfsaffdj" sending spam from IP 81.213.207.169 along with such usernames as "buh, buhg, buhgalteria, bux". http://www.projecthoneypot.org/ip_81.213.207.169

These very usernames have been sending fake "Canadian pharma" spam for years https://www.projecthoneypot.org/dictionary_attacker_usernames.php

The IP 209.17.128.161 is associated with the phone number 604-315-7200 https://www.google.co.uk/?gws_rd=ssl#q=209.17.128.161&start=40

+1 604-315-7200 is a Vancouver (Canada) phone number https://www.google.co.uk/search?sclient=psy-ab&biw=1022&bih=615&q=%2B1+604-315-7200&oq=%2B1+604-315-7200&gs_l=hp.3...9075.10361.1.10584.3.3.0.0.0.0.176.523.0j3.3.0....0...1c.1.64.psy-ab..4.0.0.qJ92Rs0lQ28&pbx=1&bav=on.2,or.&bvm=bv.98197061,d.bGQ

Thus, the crime described in the article was probably made by Canada-based spammer/s.