(2012-11-27, 04:16 AM)Omar G. Wrote: [ -> ]Isn't it you?
As far as I know, no. WO actually lists my external IP and I wasn't browsing the index, obviously.
Do you have the "Scrutinize User's IP address?" setting enable in the ACP? If so, users can fake the X-Forwarded-For header to be anything, providing it's in a valid IP address format.