odd authenticated user

what am i missing?

[stuartmcdonald]

Was looking at my awstats report today and under "authenticated users" it lists the admin user I expected to see there (we have a password protected administration directory) but today there is another user with a username I don't recognise and certainly didn't assign.

Can someone explain (or point me to an explanation ) what is happening please?

[dcrombie]

Check your logs and see what the response code was for that username - most likely it's a "401 - Authentication Required"

[stuartmcdonald]

Typical follows (i've blanked out IP etc)

XXX.XXX.XX.XX - mysteryusername [16/Jun/2004:03:24:15 -0500] "GET /url.html HTTP/1.1" 200 16222 "referer here" "browser blurb here"

the guy surfed around the site for a while - not in the protected portion of the site (he didn't try to access that - so there was no 401).

I'm mystified, though this really isn't my strongpoint!