Here are the log entries:

+------------------+--------------+---------------------+
| log_email        | log_username | log_date            |
+------------------+--------------+---------------------+
| Didavi@yandex.ru | Robin        | 2007-09-09 06:01:18 |
| bahira@yandex.ru | Robin        | 2007-09-09 06:02:07 |
+------------------+--------------+---------------------+

Now I am not going to waste time searching for “Robin” being registered on other boards as the username is much too common. A search for the email addresses turned up only one hit. Then again, “Robin” might just be getting started.

What I see is an initial registration attempt that was successful at passing the Checkbox Challenge but that got rejected by a ban on yandex.ru. So they came back less than a minute later to try again with an alternate email address. That, too, was blocked due to a ban on yandex.ru. I guess what I am seeing is that I will still need to use the ban list for certain domains.

I checked on my biggest board and I have had 10 registration attempts from that domain since I started the Checkbox Challenge; none of them were successful. On another site: 19 registrations, no successes. On a third site: 20 attempts, zero successes. So my point is that anti-bot mechanisms are not going to be enough. I said that earlier, and I continue to gather evidence to support that claim.

Rats.