It just gives up that data to anyone that asks? Seems like a huge privacy issue.
Imaging Apache or Nginx giving up the last 600 IPs it served and maybe the URLs they went to.
edit: there is always the occasionally open Apache /server-status handler that leaks this type of data.