How the fuck would he do that just from (at most) having someones IP address. Maybe he's one of those that thinks you can track a home address from IP. 
Social engineering. All it takes is a mod or admin is a bit of strong arming and they can easily get someone's address... but the thing is, you shouldn't be using your personal address or name anyway.
If someone sent me a package of narcoticos I'd just let the local LEO know and give them that douche bag's info. Cocksuckers like that always think they're so safe, but there are just as many people willing to stab their backs. That's why you never want to be this kind of person. Never hit these kinds of lows. Never even tell a dirty lie that you'll incriminate someone. If you do, it will come back to haunt you.