On Fri, Oct 24, 2014 at 1:34 PM, Arcane 21 arcane@live.com wrote:
Spammers might be using something similar to the IPfuck Firefox/Chrome extension, which fakes an IP address instead of allowing the real IP to be recorded, not sure how we can defend against that sort of thing at present.
MediaWiki doesn't trust the XFF header unless it's from a trusted proxy, so the user's real IP would be reported.