The Romanian Connection

Encyclopedia Dramatica, along with remnants of LulzSec
and AnonOps, have moved to servers in Romania. 




Voxility provides wholesale bandwidth and rents servers to hosting providers and has datacenters in Frankfurt, Bucharest, Washington and Los Angeles. Many of ED's related domains are hosted by Voxility in Bucharest.

Address lookup for donate.encyclopediadramatica.se

canonical name


direct-connect.encyclopediadramatica.se.  Whoops,this no longer true. It changed after this post was first published.


addresses 37.221.160.140

Network Whois record

Queried whois.ripe.net with "-B 37.221.160.140"...
% Information related to '37.221.160.128 - 37.221.160.191'


inetnum: 37.221.160.128 - 37.221.160.191
netname: SrsVPS1
descr: SrsVPS
country: RO
admin-c: TE1649-RIPE
tech-c: TE1649-RIPE
status: ASSIGNED PA
mnt-by: VOXILITY-MNT
mnt-lower: VOXILITY-MNT
mnt-routes: VOXILITY-MNT
changed: noc@voxility.com 20120412
remarks: INFRA-AW
source: RIPE


person: Thomas Edge
address: 8971 Complex Drive
address: San Diego, CA 92123
phone: +978-587-1190
e-mail: thomas@srsvps.com
nic-hdl: TE1649-RIPE
mnt-by: VOXILITY-MNT
changed: noc@voxility.com 20120228
abuse-mailbox: abuse@srsvps.com
source: RIPE

The name and address in California aren't real. The phone number is Brian Zaiger's, though. Srsvps sells vps's and is advertised on ED.

37.221.160.140 and 37.221.160.138 deliver encyclopediadramatica.se wiki and forum pages.
37.221.160.139 is "the future home of Viral Security".
37.221.160.135 is a proxy, ro.myprivatevpn.be .


Another Romanian netblock controlled by ED's principals is:

Queried whois.ripe.net with "-B 109.163.233.1"...

% Information related to '109.163.233.0 - 109.163.233.63'

inetnum: 109.163.233.0 - 109.163.233.63
netname: SrsVPS1
descr: SrsVPS
country: RO
admin-c: TE1649-RIPE
tech-c: TE1649-RIPE
status: ASSIGNED PA
mnt-by: VOXILITY-MNT
mnt-routes: VOXILITY-MNT
mnt-lower: VOXILITY-MNT
changed: noc@voxility.com 20120217
remarks: INFRA-AW
source: RIPE


Some web sites on this netblock:
109.163.233.11 AnonNews, owned by Sven Slootweg
109.163.233.7 Anonleaks
109.163.233.26 Anonleaks
109.163.233.31 RogueSec
109.163.233.32 RogueSec
109.163.233.35 sexytiem.se
109.163.233.38 302 redirect to http://233.38/ (bogus IP address)
109.163.233.45 seductiondatabase.com
109.163.233.9 302 redirect to http://233.9/ (bogus IP address)


Non-Romanian netblocks here:

Queried whois.ripe.net with "-B 37.59.72.64"...

% Information related to '37.59.72.64 - 37.59.72.79'

inetnum: 37.59.72.64 - 37.59.72.79
netname: EDRAMA2
descr: EDrama Ltd
country: CH
org: ORG-OC30-RIPE
admin-c: OTC2-RIPE
tech-c: OTC2-RIPE
status: ASSIGNED PA
mnt-by: OVH-MNT
changed: noc@ovh.net 20120202
source: RIPE




37.59.72.67 www.anonnews.org tahoe-gateway.cryto.net direct-connect.anonnews.org
37.59.72.70 xvp.edrama.us
37.59.72.74 mail.edrama.us mail.encyclopediadramatica.se



Queried whois.ripe.net with "-B 37.59.72.96"...

% Information related to '37.59.72.96 - 37.59.72.111'

inetnum: 37.59.72.96 - 37.59.72.111
netname: EDRAMANET1
descr: EDrama Ltd
country: CH
org: ORG-OC30-RIPE
admin-c: OTC2-RIPE
tech-c: OTC2-RIPE
status: ASSIGNED PA
mnt-by: OVH-MNT
changed: noc@ovh.net 20120202
source: RIPE


37.59.72.101 srsvps.com ns1.srsvps.com
37.59.72.103 ns2.srsvps.com

Here is an incomplete history of of the reborn ED's hosting providers. 

April 15 2011
69.65.55.21

June 27 2011
web.encyclopediadramatica.ch: 216.14.104.1
sql.encyclopediadramatica.ch: 216.14.104.2

June 30 2011
direct.encyclopediadramatica.ch: 69.65.55.21

July 12 2011
184.164.147.135

July 22 2011
85.10.206.54

August 31 2011
94.23.168.77

September 14  2011
static.encyclopediadramatica.ch, images.encyclopediadramatica.ch: 85.10.206.54

September 19  2011
direct-connect.encyclopediadramatica.ch: 173.204.20.100


September 22  2011
direct-connect.encyclopediadramatica.ch, lb1.edrama.us: 31.22.165.46

September 23 2011
46.246.111.72

October 2 2011
213.155.18.13strike