Help! I just saw a Twiceler Spider listed as "Guest" but showing up location-wise as "Admin Control Panel"!!!! There was no stop sign graphic to indicate prevention from viewing, either.

I have a "banned IP" user I created, and I just threw that Twiceler spider's IP addy in there to stop the access, but I am worried about my boards security now.
ALSO, Unless I have some major memory issues, one of my regular members was looking at a hidden moderators forum at the same time this occured, which I have set to be invisible to that user. I'm going to double check those settings right now, but have a bad feeling the two things might somehow be related....
Any help or thoughts much appreciated!