[free-sklyarov] U.S. DoD [seems to be djf] looking for pro-Sklyarov pages?

[Lars Gaarden]

> From: "mobythor" <mobythor at fuckmicrosoft.com>
> To: <farber at eff.org>
> 
> U.S. DoD looking for pro-Sklyarov pages? 
> (english)
> 198.26.123.36 - BU-WCS1-KELLY.NIPR.MIL
> 198.26.123.37 - BU-WCS2-KELLY.NIPR.MIL

> I encourage webmasters hosting pages about Dmitry, and copies of the 
> PowerPoint presentation, to check their logs for hits from the 198.25.0.0 
> - 198.26.255.255 netblock; this is the block controlled by NIPR.  I'm 
> specifically interested in hits from Inktomi Search spiders, looking for 
> files related to Sklyarov.  I want to find out how widespread this 
> activity is, and I intend to find out for what purpose this searching is 
> taking place.
> 
> -Mark Bialkowski

I can confirm that the same bot has hit eurorights.org. On average a couple
of hits per day. 72 unique requests the last month, don't have older logs
so I don't know when it started. IP addresses were 198.26.123.36 through .38

URLs they are hitting:

/
/eudmca/                        (History about the EU copyright directive)
/eudmca/CopyrightDirective.html (Local copy of the EU copyright directive)
/robots.txt


In addition, I found a single non-spider hit from the 198.26 netblock:

198.26.123.36 - - [22/Aug/2001:02:25:31 +0200] "GET /eudmca/CopyrightDirective.html HTTP/1.0" 200 57660 "-" "Mozilla/3.01 (compatible;)"

As you say, this is a directed scan and not a regular spider since it doesn't
follow any of the other links on the / page.

-- 
LarsG