You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Broming plutonium <zh...@yahoo.ca> on 2005/05/09 06:15:50 UTC

[users@httpd] What is w;wget?

Hi,
 
I haven't checked my logs for a while, but when I did decide to check them, I found this strange request:
 
62.210.181.107 - - [23/Apr/2005:12:18:44 -0400] "GET //cgi-bin/awstats/awstats.pl \"w;wget\" HTTP/1.1" 404 303
 
This request was repeated 10 times, one time per second, changing the "//cgi-bin/awstats/awstats.pl" to "//cgi-bin/awstats.pl" , "//cgi/awstats.pl"...
 
Why is this client so desperate to access awstats.pl? And what does w;wget mean? 
 
Actually, I just discovered that there are 27 requests that had something to do with awstats.pl. What's happening?



---------------------------------
Post your free ad now! Yahoo! Canada Personals

Re: [users@httpd] What is w;wget?

Posted by Tim Burden <ti...@burden.ca>.
Google is our friend.

wget is a unix package for retrieving files over HTTP. So, it's sort of like a browser.

As for looking for awstats, someone is likely looking for vulnerabilities like this one:
http://www.securiteam.com/securitynews/5MP0B2AEKS.html
  ----- Original Message ----- 
  From: Broming plutonium 
  To: users@httpd.apache.org 
  Sent: Monday, May 09, 2005 12:15 AM
  Subject: [users@httpd] What is w;wget?


  Hi,

  I haven't checked my logs for a while, but when I did decide to check them, I found this strange request:

  62.210.181.107 - - [23/Apr/2005:12:18:44 -0400] "GET //cgi-bin/awstats/awstats.pl \"w;wget\" HTTP/1.1" 404 303

  This request was repeated 10 times, one time per second, changing the "//cgi-bin/awstats/awstats.pl" to "//cgi-bin/awstats.pl" , "//cgi/awstats.pl"...

  Why is this client so desperate to access awstats.pl? And what does w;wget mean? 

  Actually, I just discovered that there are 27 requests that had something to do with awstats.pl. What's happening?




------------------------------------------------------------------------------
  Post your free ad now! Yahoo! Canada Personals

RE: [users@httpd] What is w;wget?

Posted by "C.Rathnasinghe" <ch...@sad.gov.lk>.
Hi refer this doc

http://directory.fsf.org/wget.html
  -----Original Message-----
  From: Broming plutonium [mailto:zhangzhaoxi2003@yahoo.ca]
  Sent: Monday, May 09, 2005 10:16 AM
  To: users@httpd.apache.org
  Subject: [users@httpd] What is w;wget?


  Hi,

  I haven't checked my logs for a while, but when I did decide to check
them, I found this strange request:

  62.210.181.107 - - [23/Apr/2005:12:18:44 -0400] "GET
//cgi-bin/awstats/awstats.pl \"w;wget\" HTTP/1.1" 404 303

  This request was repeated 10 times, one time per second, changing the
"//cgi-bin/awstats/awstats.pl" to "//cgi-bin/awstats.pl" ,
"//cgi/awstats.pl"...

  Why is this client so desperate to access awstats.pl? And what does w;wget
mean?

  Actually, I just discovered that there are 27 requests that had something
to do with awstats.pl. What's happening?




----------------------------------------------------------------------------
--
  Post your free ad now! Yahoo! Canada Personals