Samrc Posted August 12, 2005 Share Posted August 12, 2005 This month I have a new entry appearing under the authenticated users and I'm not sure what it means. All the other users appear as the names I assigned under WEBPROTECT feature, but now there's one that is called "" (just hte two quotes). Is this caused by me logging in, or how does that appear? Anything I need to be concerned about? (I love that list....it gives me such a chuckle to see one of my sales reps log into his sales stat page more thatn 3 times the rate of my other sales reps! Keeps hoping something else will appear....kinda like staring into the refrig). Thanks for any info here. Quote Link to comment Share on other sites More sharing options...
TweezerMan Posted August 12, 2005 Share Posted August 12, 2005 I don't really know for sure, but it doesn't sound to me like something that should be there, and I'd probably remove it. Quote Link to comment Share on other sites More sharing options...
Samrc Posted August 20, 2005 Author Share Posted August 20, 2005 I'd probably remove it Don't understand what you mean. This item appears under the authenticated users list in awstats. I don't have anything like that in my assignments for web protect so there is nothing to remove. But since it appears in the stats as a user that signed in, do I need to be concerned? It never appeared before this month. Quote Link to comment Share on other sites More sharing options...
TCH-Bruce Posted August 20, 2005 Share Posted August 20, 2005 I've seen them in my awstats and never got concerned over it. Usually it happened after I accessed something using File Manager in cPanel. Quote Link to comment Share on other sites More sharing options...
Samrc Posted August 20, 2005 Author Share Posted August 20, 2005 okie dokie. Thank you! Quote Link to comment Share on other sites More sharing options...
jwbowden Posted August 24, 2005 Share Posted August 24, 2005 (edited) Don't understand what you mean. This item appears under the authenticated users list in awstats. I don't have anything like that in my assignments for web protect so there is nothing to remove. But since it appears in the stats as a user that signed in, do I need to be concerned? It never appeared before this month. <{POST_SNAPBACK}> I'm also seeing 1 entry under awstats "authenticated users" - I see the url of a website that I never recall visiting myself, nor do I recall seeing it in any other stats. Anyone know if this stat is reliable? Could there be a bug causing it to show something? Or am I just not understanding what that stat is? Here's the info: Authenticated users Authenticated users : 1 Pages Hits Bandwidth Last visit www.gaia-prelude.com/file 1 1 34.61 KB 19 Aug 2005 - 07:02 Other logins (and/or anonymous users) 3823 13314 167.10 MB Thanks Edited August 24, 2005 by jwbowden Quote Link to comment Share on other sites More sharing options...
TweezerMan Posted August 24, 2005 Share Posted August 24, 2005 I think the Authenticated Users section of AWStats is showing any user that attempts to access a page requiring authentication, and records whatever text is entered in the username box. It looks to me like a dumb bot tried to hit one of your authenticated pages, and entered the URL it's spamming in the username field. It would not have gained access, and since there was only one attempt, it is not something that I would be particularly concerned about. Quote Link to comment Share on other sites More sharing options...
jwbowden Posted August 26, 2005 Share Posted August 26, 2005 I think the Authenticated Users section of AWStats is showing any user that attempts to access a page requiring authentication, and records whatever text is entered in the username box. It looks to me like a dumb bot tried to hit one of your authenticated pages, and entered the URL it's spamming in the username field. It would not have gained access, and since there was only one attempt, it is not something that I would be particularly concerned about. <{POST_SNAPBACK}> Thanks TCH-David! That's helpful info. Just trying to understand what I see on the stats page. Thanks again! Quote Link to comment Share on other sites More sharing options...
MissZoot Posted August 26, 2005 Share Posted August 26, 2005 I have TWO authenticated users listed on my awstats, both of which I recognize (I have NO users for my site, I just recognize their names as my readers) - how did that happen? Did they try to access my site? It says they enter 7 times? What is the explanation? I'm confused. Quote Link to comment Share on other sites More sharing options...
TCH-Bruce Posted August 26, 2005 Share Posted August 26, 2005 Welcome to the forums MissZoot Maybe David's post explained it I think the Authenticated Users section of AWStats is showing any user that attempts to access a page requiring authentication, and records whatever text is entered in the username box. Quote Link to comment Share on other sites More sharing options...
TCH-Rob Posted August 26, 2005 Share Posted August 26, 2005 Welcome to the forums MissZoot Quote Link to comment Share on other sites More sharing options...
TCH-Don Posted August 26, 2005 Share Posted August 26, 2005 Welcome to the forums MissZoot Quote Link to comment Share on other sites More sharing options...
TweezerMan Posted August 26, 2005 Share Posted August 26, 2005 Welcome to the forums, MissZoot! Quote Link to comment Share on other sites More sharing options...
TCH-Thomas Posted August 27, 2005 Share Posted August 27, 2005 Welcome to the forum, MissZoot. Quote Link to comment Share on other sites More sharing options...
Samrc Posted September 11, 2005 Author Share Posted September 11, 2005 This month I have 2 authenticated users appearing showing they idelarosa[at]fabricadigital.com.mx 17 pages and danjohn with 7 pages. NEITHER have been allowed access. What is going on? Edit: TCH-Bruce modified the email address to prevent spam harvesting Quote Link to comment Share on other sites More sharing options...
TCH-Rob Posted September 11, 2005 Share Posted September 11, 2005 If someone puts in http://(whatever):@yourtchdomain.com (as if they were accessing a secured area via a browser, or attempting to), awstats will interpret that as an authentication (or authentication attempt). In simpler terms, an authenticated user is a user who enters a username via the login box in password protect directories. Even if the user is denied access, they are still logged as an authenticated user Quote Link to comment Share on other sites More sharing options...
Samrc Posted September 11, 2005 Author Share Posted September 11, 2005 Yest I understood that from this earlier post and response Authenticated users : 1 Pages Hits Bandwidth Last visit www.gaia-prelude.com/file 1 1 34.61 KB 19 Aug 2005 - 07:02 ...It would not have gained access, and since there was only one attempt, it is not something that I would be particularly concerned about. But in my case, the two entries in my authenticated list actually indicate that they viewed 17 pages and 7 pages. So it appears, based on the stats that they either got in or kept trying multiple times (which wouldn't make sense to me). Quote Link to comment Share on other sites More sharing options...
TCH-Rob Posted September 11, 2005 Share Posted September 11, 2005 Check your logs, in your stats there should be a last visit listed. Find the date in your logs and you should be able to see if they actually went anywhere. Quote Link to comment Share on other sites More sharing options...
TweezerMan Posted September 11, 2005 Share Posted September 11, 2005 Yest I understood that from this earlier post and response But in my case, the two entries in my authenticated list actually indicate that they viewed 17 pages and 7 pages. So it appears, based on the stats that they either got in or kept trying multiple times (which wouldn't make sense to me). <{POST_SNAPBACK}> Bots aren't always that smart - many will keep beating their head on that brick wall . Quote Link to comment Share on other sites More sharing options...
Samrc Posted September 12, 2005 Author Share Posted September 12, 2005 Check your logs, in your stats there should be a last visit listed. Find the date in your logs and you should be able to see if they actually went anywhere. Drat. Didn't get that log! Will watch for it again this month. Quote Link to comment Share on other sites More sharing options...
TCH-Rob Posted September 12, 2005 Share Posted September 12, 2005 Let us know what you find. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.