That's some kind of encryption box. It has a "zeroize" button, to clear the keys in an emergency. It might have something that forces uniform latency to make traffic analysis more difficult. Some cryptosystems are totally synchronous, and send random bits at a constant rate when there's no data.
>The latency is what is getting me though. 0.4 round trip every time. Tested from multiple machines including a phone on LTE to get the same response time. That should theoretically mean I am right next to the machine which doesn't make sense across three different connections.
It means your 3 different connections have decent connectivity to whatever host currently responds to ping for that IP. You cant really derive much more than that from a ping. If it has been there since 1994 it might have been decommed and the IP reassigned. I would suggest a scream test to be honest, especially if you have orders to remove it anyway, seeing if the pings stop responding when you remove the power or networking will tell you more.
The only thing I can find on Google is a website straight out of 1999 and lawsuit from 1995. They're obviously a US military contractor, but that's all I can tell.
The latency is what is getting me though. 0.4 round trip every time. Tested from multiple machines including a phone on LTE to get the same response time.
Could the latency consistency be something designed to make it difficult to pinpoint its location? It sounds like you found the hardware and are just wondering what it is?
Well ain't this place a geographical oddity! 0.4ms from everywhere!
Is this the hardware you have? [1]
That's some kind of encryption box. It has a "zeroize" button, to clear the keys in an emergency. It might have something that forces uniform latency to make traffic analysis more difficult. Some cryptosystems are totally synchronous, and send random bits at a constant rate when there's no data.
[1] https://www.artisantg.com/TestMeasurement/89462-1/Cyberchron...
>The latency is what is getting me though. 0.4 round trip every time. Tested from multiple machines including a phone on LTE to get the same response time. That should theoretically mean I am right next to the machine which doesn't make sense across three different connections.
It means your 3 different connections have decent connectivity to whatever host currently responds to ping for that IP. You cant really derive much more than that from a ping. If it has been there since 1994 it might have been decommed and the IP reassigned. I would suggest a scream test to be honest, especially if you have orders to remove it anyway, seeing if the pings stop responding when you remove the power or networking will tell you more.
CyberChron. If you don't need to know, don't ask.
And you're also assuming that all the pings are being returned by this box.
Well now I gotta ask. What's up with CyberChron?
The only thing I can find on Google is a website straight out of 1999 and lawsuit from 1995. They're obviously a US military contractor, but that's all I can tell.
The latency is what is getting me though. 0.4 round trip every time. Tested from multiple machines including a phone on LTE to get the same response time.
https://en.wikipedia.org/wiki/Anycast
Would looking at the device's MAC address (which you can get from arp) help? That would give you at least the manufacturer of the network interface.
This is assuming you're on the same subnet.
Could the latency consistency be something designed to make it difficult to pinpoint its location? It sounds like you found the hardware and are just wondering what it is?
Well ain't this place a geographical oddity! 0.4ms from everywhere!
Wouldn’t that mean all upstream providers are all in on it? Participating in the charade and returning ICMP packets preemptively?
Lots of ASNs in 46.28.0.0/16 What’s the actual netblock?
Is it in what looks like a luggage/waterproof case? If so, that’s milspec networking hardware.