Is anyone else seeing this in there logs??

Sqworm/2.8.23

[roscoepico]

I've been seeing this little bugger in my logs for sometime...Sqworm/2.8.23...with an ip address of 209.218.111.111........I am under the impression that she's comming from excite(@home).....If anyone else has any info, please feel free to share.....

I had the wrong ip in there.......the corrected ip is above......sorry

Edited by: roscoepico

[grnidone]

Hmmm. I looked up the ip address and found "sluggo2.websense.com".
-G

[roscoepico]

Seeing lots of variations of...

Visitor IP: 209.218.111.254
UA: Sqworm/2.9.15-ALPHA

looks like the @home network....anyone out there have an updated list they'd like to share???

[Brett_Tabke]

Have you noticed any pages showing up in Excite that have been hit by 'the worm' that were not spidered by Architext at known Excite ip's?

[roscoepico]

To tell you the truth Brett, I haven't seen anything new added in quite some time. I read yesterday over @ P.O. that D.S. was having some luck getting sites indexed, something like a 10 week wait. It's too bad he doesn't go into a little more detail. Have you seen the spider in question??? And if so, notice any indexing or reindexing as a result?

[roscoepico]

Ahhhh...After looking more closely it appears as though this little guy is only looking into adult related sites and leaving others alone.....

[roscoepico]

He nows seems to be hitting urls @ random and not adult sites exclusively.

[rtfmnews]

Looks like it's from a "filtering" service, looking for sites to block. Probably hitting more adult URLs because of following links from same.

Dan :)

[Brett_Tabke]

From what everyone has said here in the forums - that seems to be the one common denominator with the sql worm - adult sites.