Yes sir, this actually is a normal tracking display from my server. The blue text on white indicates a new, normal page or CGI script has been served up. Red (or blue on red) text means that no such thing exists on the server (and therefore, someone is trying to do something they should not be.) White text on blue/black means a normal, properly served page that has been there a while. The background color in all cases but white ( red or blue) behind each entry is a time indicator that moves to the right as the hit ages. The prefixes, O, B and others, tell me which web site is being hit, saving the need to print a lot of leading text for each URL. The page refreshes every few seconds, so you see aging graphs moving steadily to the right.

When the server is busy, the oldest listings are replaced with the newest listings.

I wrote this utility in Python. It operates by taking a "tail" of the various site logs and sorting out what pages and CGI scripts were requested on what sites. It's interesting to me to see just how much of current activity is black hat.

#doggerel

EXIF: