Re: [users@httpd] What is w;wget?

["Tim Burden" <tim@xxxxxxxxx>]

Google is our friend.

 

wget is a unix package for retrieving files over HTTP. So, it's sort of like a browser.

 

As for looking for awstats, someone is likely looking for vulnerabilities like this one:

http://www.securiteam.com/securitynews/5MP0B2AEKS.html

----- Original Message -----

From: Broming plutonium

To: users@xxxxxxxxxxxxxxxx

Sent: Monday, May 09, 2005 12:15 AM

Subject: [users@httpd] What is w;wget?

Hi,

 

I haven't checked my logs for a while, but when I did decide to check them, I found this strange request:

 

62.210.181.107 - - [23/Apr/2005:12:18:44 -0400] "GET //cgi-bin/awstats/awstats.pl \"w;wget\" HTTP/1.1" 404 303

 

This request was repeated 10 times, one time per second, changing the "//cgi-bin/awstats/awstats.pl" to "//cgi-bin/awstats.pl" , "//cgi/awstats.pl"...

 

Why is this client so desperate to access awstats.pl? And what does w;wget mean?

 

Actually, I just discovered that there are 27 requests that had something to do with awstats.pl. What's happening?

---

Post your free ad now! Yahoo! Canada Personals