@sarajw Since all of these attacks are automated, I usually put up some sort of completely dumb captcha, like a picture of a bunny with a radio button group asking "what is this a picture of, a bunny, a moose, a crosswalk or a platypus?" After that, I get zero spam, because it's not a well-known captcha.