I was going through the server logs for our website which is completely separate from our internal user network and noticed a strange listing from one ip address with two peoples names that work for the company:
Host: 64.132.139.170
*
/instmsg/aliases/personsnameA Http Code: 404 Date: May 09 07:18:35 Http Version: HTTP/1.1 Size in Bytes: - Referer: - Agent: -
*
/instmsg/aliases/personsnameB Http Code: 404 Date: May 09 08:09:12 Http Version: HTTP/1.1 Size in Bytes: - Referer: - Agent: -
Could be a URL being passed between those people while on IM, and they clicked on the URL to look at the page. The source of the click could be recorded as the machines hosting the IM software, i.e. their own machines.
That makes sense. I did ask them. The only instant messengers that the use are windows messengers on our network(which is not tied to the web server) so I suppose it is possible that one of them clicked a link to the site from the IM.
