Who's online is based off of the script they are looking at. Bots and Search Engine spiders will crawl every link on your site, so often if you have alot of anonymous users in wierd locations, that's why.
They don't really see those things if they aren't logged in.... they see a "you must be logged in" kind of error message.
