I serve a few pages from Apache (v. 2.4.38) and have only notified one person of the paths to the pages. He says he has not shared the paths and does not use a proxy server. For the most part the apache access log shows only requests for those pages from that one person’s (static) IP (together with the usual denied random known-weakness requests).