Code:
Originally posted by carpman
# Hits Files KBytes Visits Username
1 7 0.01% 7 0.01% 38 0.01% 1 0.01% rsh8
2 1 0.00% 1 0.00% 8 0.00% 1 0.01% 1686483
3 1 0.00% 1 0.00% 8 0.00% 1 0.01% wagsrebe
Apache will log, and Webalizer will report on, usernames that fail authentication as well as usernames that pass authentication. Those strange users more than likely have seen nothing more that the "you are not authorized to view this page" error message.
Try it for yourself. Type a bogus name into the auth form, and then see if it shows up in the webalizer reports the next day.