Thread:Project:Support desk/Strange IP's with user's.

MediaWiki 1.17.1, PHP 5.2.17 (cgi-fcgi), MySQL 5.1.61-community-log

I've been noticing recently that a lot of users (Over the past couple weeks or more.) seemed to have been using proxies. That's what I thought. When they created their accounts, I later checked their IP's, I saw first they used a proxy IP that had been earlier blocked, then switch to a regular IP. At least that was what the checkuser logged entries looked to me. But then I began to notice everyone signing up an account on my site all used proxies first. (Each proxy had been associated with a previously known spammer.) So I ran an experiment and created a test account. I then logged in with my admin account and ran a checkuser on that new test account. I saw that it also used a proxy IP before going to my own IP address? To me it looks like either someone has inserted something into the account creation process or something else. I'm not sure what it's trying to do whether to hijack, monitor, or just an error? The only thing that is consistent is that every person who creates an account starts off with a known spammer proxy IP before their real IP is logged. (The user's apparently are unaware of this.) Anyone else have this problems? Anyway to fix this/root out what the problem may be?

On a side note: (I'm not sure if this is related or even relevant.) but a couple or more weeks ago, I had a persistent vandal/spammer who was able to get past my site's questycatchpa and create multiple accounts. This person always used three separate IP's. Two were known spammer proxies and the third happened to be my own IP. This person would create a new account every few days with two new proxies, but would include my IP along with it too. Either they weren't able to create a spammer page or did not want to, but for a long while they included my IP with their accounts. Now I checked my end and my firewall is up to date and so is my router. Plus, after a while the person stopped trying to use my IP. (I thought they were trying to get me to black myself.)