I typically have about 20 guests on the forum at any one time. A few have caught my attention though. Several Windows NT 4.0 with IE4 trying to post a reply are denied access. Also, I had this one entry that has me concerned:
| Guest 12 |
Today at 6:16pm |
0 minutes |
Windows XP IE 6 |
127.0.0.1 |
How is this guest being tracked from "localhost"? I don't run IE6 on the server. It is Server 2003 with IE7 and all current security patches applied. Are they spoofing the IP somehow? The site is behind a SonicWall firewall with only necessary ports open. Any ideas? Should I be worried?