Bot-like scanning/indexing from Lockheed Martin

Posted on August 16th, 2010 Admin

Sometimes I look thru the blog stats to see which hosts are visiting.  I’ve run inot a lot of .mil domains but this is the first time I’ve noticed Lockheed Martin, the biggest military contractor in the US.

These entries are from today. Looks like a custom blog/CMS-oriented scan using URL variables like /?p=1234 to index the site pages and comment feeds.

There’s no reason a simple search spider should be scanning a site using random url variables.  This is a hostile scan that targets specific sites. This bot did not follow links to get here, nor is it following the links on my site to index it, which would be normal search indexing behavior.

They’re indexing my content for profiling, not because they hope to provide relevant search results to users trying to do research or read news. I have no idea how often this bot has been scanning the blog.  I’ll have to do some log analysis.

Bot-like scanning of random urls is going to get you banned.  If a human inside Lockheed Martin wants to legitimately read my blog, then fine. You might learn something.  But this is wasting my resources and you’re probing the site in a way that it’s not intended to be used.


Client Data:

  • IP: 192.31.106.34
  • Hostname: proxy1a.external.lmco.com
  • User Agent: Mozilla/4.0 (compatible;)
  • Referrer:
  • Browser: Netscape 4
  • End timestamp: 2010-08-16 11:00:33

192.31.106.34 2010-08-16 11:00:33

Referrer: None
Hostname: proxy1a.external.lmco.com [go ahead and copy paste lmco.com into your browser, if you like. Goes to Lockheed Martin (military contractor)]
User Agent: Mozilla/4.0 (compatible;)
OS: Unknown
Reported Browser: Netscape 4

whois 192.31.106.34?

[Querying whois.arin.net]

NetRange:       192.31.106.0 – 192.31.106.255
CIDR:           192.31.106.0/24
OriginAS:
NetName:        LM-192-31-106
NetHandle:      NET-192-31-106-0-1
Parent:         NET-192-0-0-0-0
NetType:        Direct Allocation
NameServer:     NS2.LMCO.COM
NameServer:     NS3.LMCO.COM
NameServer:     NS1.LMCO.COM

RegDate:        1997-06-17
Updated:        2001-09-26
Ref:            http://whois.arin.net/rest/net/NET-192-31-106-0-1

OrgName:        Lockheed Martin Corporation
OrgId:          LHMC
Address:        1401 Del Norte
City:           Denver
StateProv:      CO
PostalCode:     80221
Country:        US
RegDate:
Updated:        2010-01-21
Comment:        Unauthorized use of this system may be subject to disciplinary action, and
Comment:        if such use is violative of state and federal laws it may be subject to
Comment:        legal action as well. Reminder: Information transmitted to a foreign person
Comment:        on this network may be subject to US Export Control laws. Contact your
Comment:        Export Coordinator for assistance.
Ref:            http://whois.arin.net/rest/org/LHMC

OrgTechHandle: LMN-ORG-ARIN
OrgTechName:   Lockheed Martin Corporation
OrgTechPhone:  +1-303-430-2064
OrgTechEmail:  lm-nic@lmco.com
OrgTechRef:    http://whois.arin.net/rest/poc/LMN-ORG-ARIN

Related: Federal Bureau of Investigation Awards Lockheed Martin Biometric Card Scanning Service Contract

“We’re proud to continue our decade-long partnership with the FBI on the Card Scanning Service program,” Read more


 

34 Responses to “Bot-like scanning/indexing from Lockheed Martin”

  1. Yep, looks like a bot to me.

    Either way Google will scan this site too and you can use Google to find what you need without even coming to this page.

    I like how you call them out though, LOL!

Leave a Reply

You must be logged in to post a comment.