I reckon this is connected with 'Disable HTTP Referer Check?' - although I am not sure.

Although your user is on a cable modem wink (draytek 2700 smile )