Welcome to WebmasterWorld Guest from 107.20.75.63

Forum Moderators: bakedjake

Message Too Old, No Replies

Is anyone else seeing this in there logs??

Sqworm/2.8.23

     
7:10 pm on Aug 22, 2000 (gmt 0)

Preferred Member

10+ Year Member

joined:July 27, 2000
posts:426
votes: 0


I've been seeing this little bugger in my logs for sometime...Sqworm/2.8.23...with an ip address of 209.218.111.111........I am under the impression that she's comming from excite(@home).....If anyone else has any info, please feel free to share.....

I had the wrong ip in there.......the corrected ip is above......sorry

Edited by: roscoepico

8:00 pm on Aug 22, 2000 (gmt 0)

Senior Member

joined:June 27, 2000
posts:1548
votes: 0


Hmmm. I looked up the ip address and found "sluggo2.websense.com".
-G
2:54 pm on Sept 8, 2000 (gmt 0)

Preferred Member

10+ Year Member

joined:July 27, 2000
posts:426
votes: 0


Seeing lots of variations of...

Visitor IP: 209.218.111.254
UA: Sqworm/2.9.15-ALPHA

looks like the @home network....anyone out there have an updated list they'd like to share???

3:04 pm on Sept 8, 2000 (gmt 0)

Administrator from US 

WebmasterWorld Administrator brett_tabke is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Sept 21, 1999
posts:38047
votes: 11


Have you noticed any pages showing up in Excite that have been hit by 'the worm' that were not spidered by Architext at known Excite ip's?
3:14 pm on Sept 8, 2000 (gmt 0)

Preferred Member

10+ Year Member

joined:July 27, 2000
posts:426
votes: 0


To tell you the truth Brett, I haven't seen anything new added in quite some time. I read yesterday over @ P.O. that D.S. was having some luck getting sites indexed, something like a 10 week wait. It's too bad he doesn't go into a little more detail. Have you seen the spider in question??? And if so, notice any indexing or reindexing as a result?
3:16 pm on Sept 8, 2000 (gmt 0)

Preferred Member

10+ Year Member

joined:July 27, 2000
posts:426
votes: 0


Ahhhh...After looking more closely it appears as though this little guy is only looking into adult related sites and leaving others alone.....
1:19 pm on Sept 13, 2000 (gmt 0)

Preferred Member

10+ Year Member

joined:July 27, 2000
posts:426
votes: 0


He nows seems to be hitting urls @ random and not adult sites exclusively.
10:28 pm on Sept 29, 2000 (gmt 0)

New User

10+ Year Member

joined:Apr 2, 2003
posts:12
votes: 0


Looks like it's from a "filtering" service, looking for sites to block. Probably hitting more adult URLs because of following links from same.

Dan :)

3:24 pm on Sept 30, 2000 (gmt 0)

Administrator from US 

WebmasterWorld Administrator brett_tabke is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Sept 21, 1999
posts:38047
votes: 11


From what everyone has said here in the forums - that seems to be the one common denominator with the sql worm - adult sites.