ok, by cross-referencing the Apache log, with the varnish (proxy/cache) enormous log, I have updated the IP address of the user registrations that got listed as 127.0.0.1 (until I patched the SMF files).
That means now we can at least see where they came from in admin/members.
There are a number og Russian and Middle-East ones - to save you the lookup, I include the table here (you need a wide screen):
id username email IP(wrong) Date-of-registration real-IP whois-info
4259 Claude-roand claude.francoise@ggmail.website 127.0.0.1 Oct 13, 2025, 02:08:19 pm 95.221.198.192 Net By Net Holding LLC, Moscow, Russia
4258 Keithtaply 66@woldex.online 127.0.0.1 Oct 13, 2025, 08:46:05 am 91.84.115.213 SERVERS TECH FZCO, Ifza Business Park, Dubai
4257 Jaimenuddy e1qrq1q1wr2qq1d@gmail.com 127.0.0.1 Oct 13, 2025, 07:09:11 am 31.130.137.252 LLC "AVANTA TELECOM", Russia
4256 Arthuroxift salesx19@iartun.com 127.0.0.1 Oct 13, 2025, 02:47:55 am 185.247.184.90 GLOBAL INTERNET SOLUTIONS LLC, Russia
4255 Azerea a@xelo.pro 127.0.0.1 Oct 12, 2025, 10:38:37 pm 88.97.246.218 YouFibre, London, UK
4254 AnthonysBup olga.grigor070797@gmail.com 127.0.0.1 Oct 12, 2025, 04:17:57 pm 192.109.138.145 RIPE, NL ...
4253 Romatriag gasiogarit@gmail.com 127.0.0.1 Oct 12, 2025, 01:29:46 pm 109.107.186.56 SERVERS TECH FZCO, Ifza Business Park, Dubai
4252 PhillipCic adv25@aolimo.com 127.0.0.1 Oct 12, 2025, 09:09:00 am 91.228.155.80 Fornex Hosting, Estepona, Spain
4251 123bzIply 123bv9@123bv1.it.com 127.0.0.1 Oct 12, 2025, 04:02:56 am 45.117.164.56 IRT-VNNIC-AP, Ha Noi, VietNam
4250 123bJoync 123bv9@123bv2.it.com 127.0.0.1 Oct 12, 2025, 01:44:52 am 103.151.53.189 IRT-VNNIC-AP, Ha Noi, VietNam
4249 123bEnelp 123bv7@123bv1.it.com 127.0.0.1 Oct 12, 2025, 01:23:07 am 103.188.242.81 IRT-VNNIC-AP, Ha Noi, VietNam
4248 BrianBut mrtommyk@gmail.com 127.0.0.1 Oct 12, 2025, 12:14:22 am 5.143.41.95 PJSC Rostelecom, Russia
4247 TimothyRix xrujujikis@anonmails.de 127.0.0.1 Oct 11, 2025, 12:05:49 pm 5.196.78.175 OVH SAS, Roubaix, France
4246 Williamanise nikita356314@gmail.com 127.0.0.1 Oct 11, 2025, 08:39:01 am 46.8.221.114 Contel OOO, Bazhova, Moscow, 129128, Russia
4245 CharlesExone ha.luongkim95@gmail.com 127.0.0.1 Oct 11, 2025, 08:00:41 am 192.73.244.36 NetActuate, Inc, Raleigh, NC
4244 muzxyz dvfkpqulq@zvezdaforum.ru 127.0.0.1 Oct 10, 2025, 09:28:41 pm 188.130.211.102 Biterika Group LLC, Russia, Moscow
4243 ShopforMib ejwfmfcc@cetakexpress.com 127.0.0.1 Oct 10, 2025, 07:20:53 pm 150.136.58.182 Oracle Corporation, Austin, TX
4242 xrbyjwbbm bms@brandshield.com 127.0.0.1 Oct 10, 2025, 05:05:02 pm 194.62.55.202 SiberDC, Kavacik Mah. Fatih Sultan Mehmet Cad, TL
4241 evichepic zarahsmallive64235o@ctive.org 127.0.0.1 Oct 10, 2025, 04:24:18 pm 158.173.3.3 RIPE, NL ...
4240 Louisreant okna.master.vitebsk@gmail.com 127.0.0.1 Oct 10, 2025, 10:45:00 am 45.88.106.84 RIPE, NL ...
4239 Holographicomi irishpolevaultmonkey@gmail.com 127.0.0.1 Oct 10, 2025, 09:47:36 am 98.188.47.132 Cox Comms, Atlanta, US
4238 Passneinc gugloff.444@gmail.com 127.0.0.1 Oct 10, 2025, 02:18:13 am 146.103.106.124 RIPE, NL ...
4237 Independentvsa michael.flynn@davispolk.com 127.0.0.1 Oct 10, 2025, 02:15:02 am 72.214.108.67 Cox Comms, Atlanta, US
4236 123bNig 123bv4@123bv2.it.com 127.0.0.1 Oct 10, 2025, 01:33:35 am 45.117.164.30 ODS Joint Stock Co, Ho Chi Minh city, Vietnam
4235 Artkameraru_Kib building.sal.e.sru@gmail.com 127.0.0.1 Oct 09, 2025, 03:05:54 pm 95.27.42.178 CORBINA TELECOM Network Operations, Russia
4234 Josephdiste adv@iartun.com 127.0.0.1 Oct 09, 2025, 11:26:14 am 5.253.31.94 GEOHOSTING-NOC, Buharest, Romania
4233 NAERTREGE1187604NEWETREWT zaojhaxi@tubermail.com 127.0.0.1 Oct 09, 2025, 07:42:52 am 165.231.182.14 N I Team, Johannesburg, South Africa
4232 krakenruss yourmnui8ail@gmail.com 127.0.0.1 Oct 09, 2025, 07:42:45 am 46.28.234.124 EUROHOSTER Ltd, 8000, Burgas, BULGARIA
4231 Awinroadads wirople@igredan.fun 127.0.0.1 Oct 08, 2025, 11:10:11 pm 37.139.53.214 Kupriyanov Pavel Nikolaevich, Russia
4230 Normandjak yourmail344@gmail.com 127.0.0.1 Oct 08, 2025, 05:45:18 pm 128.90.145.4 Unus Inc, Austin, TX, 78703, US
4229 Alfredpar dser5857@gmail.com 127.0.0.1 Oct 08, 2025, 04:12:02 pm 192.73.244.36 NetActuate Inc, NC, 27605, US
4228 RichardVep work777top@gmail.com 127.0.0.1 Oct 08, 2025, 02:06:37 pm 135.181.79.90 RIPE Network Coordination Centre (RIPE)
4227 123blouBy 123bv1@123bv2.it.com 127.0.0.1 Oct 08, 2025, 01:38:24 pm 103.188.242.20 BAO LONG MANAGEMENT CONSULTANT, Ha Noi, VietNam
4226 AlexanderNus lev26971@gmail.com 127.0.0.1 Oct 08, 2025, 12:58:34 pm 212.192.55.206 193091 St.Petersburg Russia
My gut feeling is that most of these can be deleted - as they all occurred in a flush, just around the upgrade time, but I will let the moderators have a look.
/Lennart
