From: Simon Spero <ses@tipper.oit.unc.edu>
Date: Sun, 5 Nov 1995 14:53:07 +0800
To: Anonymous <nobody@REPLAY.COM>
Subject: Re: lp (134.222.35.2)?
In-Reply-To: <199511050620.HAA14046@utopia.hacktic.nl>
Message-ID: <Pine.SOL.3.91.951104223658.7174A-100000@chivalry>
MIME-Version: 1.0
Content-Type: text/plain


On Sun, 5 Nov 1995, Anonymous wrote:

> >  Notice that both messages went through an unnamed site -- 134.222.9.1 and
> >  then a strangely-named site, "lp (134.222.35.2)" -- then through the same
> >  Vienna, Virginia (USA) site ... and thereafter, on to their destination.
> >  I.e., the second message went through Virginia to get from Switzerland to
> >  Israel.
> >  
> >  The whois servers at the InterNIC and at nic.ddn.mil for MILNET Information
> >  report, ``No match for "134.222.9.1". '' and `` No match for
> >  "134.222.35.2".''

Yes, you've finally cottoned on to the secret NSA routing trick to 
cleverly tap all traffic. Really clever the way they use two hosts in the 
132.222 Class B network. Strange that traffic from EUNET should be using 
that network, especially since it happens to be listed in the whois 
database as being NET-EUNET-X25.

::chivalry:ses$ whois -h rs.internic.net 134.222
::European Unix Users Group (NET-EUNET-X25)
::   Kruislaan 413
::   NL-1098 SJ Amsterdam
::   NETHERLANDS