[42902] in Cypherpunks
Re: lp (134.222.35.2)?
daemon@ATHENA.MIT.EDU (Simon Spero)
Sun Nov 5 01:47:55 1995
Date: Sat, 4 Nov 1995 22:48:39 -0800 (PST)
From: Simon Spero <ses@tipper.oit.unc.edu>
To: Anonymous <nobody@REPLAY.COM>
Cc: cypherpunks@toad.com
In-Reply-To: <199511050620.HAA14046@utopia.hacktic.nl>
On Sun, 5 Nov 1995, Anonymous wrote:
> > Notice that both messages went through an unnamed site -- 134.222.9.1 and
> > then a strangely-named site, "lp (134.222.35.2)" -- then through the same
> > Vienna, Virginia (USA) site ... and thereafter, on to their destination.
> > I.e., the second message went through Virginia to get from Switzerland to
> > Israel.
> >
> > The whois servers at the InterNIC and at nic.ddn.mil for MILNET Information
> > report, ``No match for "134.222.9.1". '' and `` No match for
> > "134.222.35.2".''
Yes, you've finally cottoned on to the secret NSA routing trick to
cleverly tap all traffic. Really clever the way they use two hosts in the
132.222 Class B network. Strange that traffic from EUNET should be using
that network, especially since it happens to be listed in the whois
database as being NET-EUNET-X25.
::chivalry:ses$ whois -h rs.internic.net 134.222
::European Unix Users Group (NET-EUNET-X25)
:: Kruislaan 413
:: NL-1098 SJ Amsterdam
:: NETHERLANDS