Where can I find Captcha?

My calender is getting hammered.

Where can I find Captcha?

My calender is getting hammered.

In my website he,she doesn't matter use this
"randon" ip

Quote:

Quote:

It would not be very effective.

Better is the following:

59.93.213.$|,59.93.213.$|,

In the above, there is a dollar sign in the last IP Block to that that Block is entirely deactivated obtaining access.

If you use a Normal 1-IP address, then the spammer would still be able to get in because the old ip was mostlikely a dynamic one from a DHCP server.

Hence the entire block mean that even the next time, his ip address from that pool could be captured.

Mind you, many big providers have a very large pool of ip address so even deactivating of the last block may not be effective. If you want to really deactivate the entire block of that provider, then you must use an utility for figure out the blocks of ip addresses that he owns and deactivate them.

Hi,
Quote:

Did you try changing names of the scripts like I mentioned in my message @ SF.net? You can do the following:

signup.php >> 2063456254.php

etc. and then give correct links everywhere. Then the bots or automated scripts used will not be able to find the signup.php!

Kinda hide and seek game.

Considering that Google gave me 12,500 hits on 'george-walker-bush.info' , then it has to be some sort of automatted tool doing the registration (bot/crawler).

I read not so long ago, that even with a 'captcha', there are some people who have worked out how to determine the 'string' within the image file, so they can even get around that.

The domain ' ' doesn't resolve to an IP address, however the 2 name servers for that domain are ns1.agnitumhost.net and ns2.agnitumhost.net , some results ...

=====================

Searching for ns1.agnitumhost.net NS record at l.root-servers.net [198.32.64.12]: Got referral to g.gtld-servers.net. (zone: net.) [took 34 ms]
Searching for ns1.agnitumhost.net NS record at g.gtld-servers.net. [192.42.93.30]: Got referral to ns2.agnitumhost.net. (zone: agnitumhost.net.) [took 49 ms]
Searching for ns1.agnitumhost.net NS record at ns2.agnitumhost.net. [203.174.83.110]: Timed out. Trying again.
Searching for ns1.agnitumhost.net NS record at ns1.agnitumhost.net. [203.174.83.109]: Timed out. Trying again.
Searching for ns1.agnitumhost.net NS record at ns1.agnitumhost.net. [203.174.83.109]: Timed out. Trying again.
Searching for ns1.agnitumhost.net NS record at ns2.agnitumhost.net. [203.174.83.110]: Timed out. Trying again.
Searching for ns1.agnitumhost.net NS record at ns2.agnitumhost.net. [203.174.83.110]: Timed out. Trying again.
Searching for ns1.agnitumhost.net NS record at ns1.agnitumhost.net. [203.174.83.109]: Timed out. Trying again.

=====================================

If you do a domain dossier an the company that has that IP block, they are in Singapore, and there is an email address for spam, abuse, etc.

Might be worth sending them an email ??

Also the company that has the domain registered is "EstDomains" (http://estdomains.com ), and they have a 'contact us' and 'report abuse' functions on their website.

I realise the domain 'george-walker-bush.info' is not hosted, only registered, but it may help to contact the registrar, if no help there, it may be a metter for ICANN ??

Quote:

See the post at https://xoops.org/modules/newbb/viewtopic.php?topic_id=59159&viewmode=flat&order=ASC&start=50#forumpost264873 by "nachenko".

The download for the DuGris SecurityImage is here

Did you try changing names of the scripts like I mentioned in my message @ SF.net? You can do the following:

signup.php >> 2063456254.php

etc. and then give correct links everywhere. Then the bots or automated scripts used will not be able to find the signup.php!

Kinda hide and seek game.


No I did not. where can I find this post?

Actually, the most commen factor has been the website address (in the signature on the profile) and the IP address in the "New Registered User" email you get when they signed on.

The first IP address was 72.36.233.67 which other people had stated on here.

The abuser is now using another IP address to sign up.

82.208.60.42

And as far as i can see none of these IP addresses have been entered into the posts.

So im gathering that these are the origin IP's