[Max Taxable]

Originally Posted by a9713030

they bruteforce with tools, not by human,
i think Max Taxable have not know what i mean,
they can use 100 proxies, then bruteforce password, if we have imagine verification, most tools can not work

Proxies don't matter if you find something in their user agent you can exclude.

Seriously.

Know how to determine their user agent? The tool they're using will likely be part of it, there will be other unique items in it you can exclude.

You have your heart set on a captcha where none exists in vBulletin, unaware that alot of these botnet programs actually defeat captchas. Image verification isn't a magic bullet.

Find out a common item in the user agent of this attacker, and exclude it using the Mod I linked you to, end of problem.

You act like other people haven't seen this before.