Wednesday, June 28, 2006

Odd Raytheon Behavior

OK, not sure what this is about, but this is just WEIRD....

The IP 199.46.200.232 [lax-gate3.raytheon.com.] came out of nowhere and asked for only these files which was very bizarre out of context.

199.46.200.232 - "GET /page1.html HTTP/1.0" "Microsoft Internet Explorer"
199.46.200.232 - "GET /favicon.ico HTTP/1.0" "Microsoft Internet Explorer"
199.46.200.232 - "GET /page2.html HTTP/1.0" "Microsoft Internet Explorer"
199.46.200.232 - "GET /favicon.ico HTTP/1.0" "Microsoft Internet Explorer"
Could it be something trying to test for bookmarks pages still existing and update favicon.ico for those pages?

If anyone has a clue, as usual, I'm curious

UPDATE...

FYI, someone at Raytheon really keeps an eye on the blogs as this was barely posted an hour before they read it. Not so unusual as many companies seem to be spying on anything said about them all the time and I see this constantly, just not so quick!
(138.127.125.236) www.technorati.com/search/raytheon
incredibill.blogspot.com/2006/06/odd-raytheon-behavior.html

whois 138.127.125.236

OrgName: Raytheon Company
OrgID: RAYTHE
Address: 141 Spring St
City: Lexington
StateProv: MA
PostalCode: 02421
Country: US

1 comment:

trash said...

HTTP/1.0 -> proxy

199.46.200.232 is a mail relay (at least 2003) and an http proxy - seems to be wide open, i think after having a quick search for "199.46.200.232".