The KB has the
Only allow article requests from logged-in users
option turned on, however, they are still receiving requests from external users.