I've been seeing this little bugger in my logs for sometime...Sqworm/2.8.23...with an ip address of 184.108.40.206........I am under the impression that she's comming from excite(@home).....If anyone else has any info, please feel free to share.....
I had the wrong ip in there.......the corrected ip is above......sorry
Edited by: roscoepico
8:00 pm on Aug 22, 2000 (gmt 0)
Hmmm. I looked up the ip address and found "sluggo2.websense.com". -G
looks like the @home network....anyone out there have an updated list they'd like to share???
3:04 pm on Sep 8, 2000 (gmt 0)
Have you noticed any pages showing up in Excite that have been hit by 'the worm' that were not spidered by Architext at known Excite ip's?
3:14 pm on Sep 8, 2000 (gmt 0)
To tell you the truth Brett, I haven't seen anything new added in quite some time. I read yesterday over @ P.O. that D.S. was having some luck getting sites indexed, something like a 10 week wait. It's too bad he doesn't go into a little more detail. Have you seen the spider in question??? And if so, notice any indexing or reindexing as a result?
3:16 pm on Sep 8, 2000 (gmt 0)
Ahhhh...After looking more closely it appears as though this little guy is only looking into adult related sites and leaving others alone.....
1:19 pm on Sep 13, 2000 (gmt 0)
He nows seems to be hitting urls @ random and not adult sites exclusively.
10:28 pm on Sep 29, 2000 (gmt 0)
Looks like it's from a "filtering" service, looking for sites to block. Probably hitting more adult URLs because of following links from same.
3:24 pm on Sep 30, 2000 (gmt 0)
From what everyone has said here in the forums - that seems to be the one common denominator with the sql worm - adult sites.