Hi Marc,
Thanks for the reply. I've updated to hCaptcha and am thinking on what question/answer to go with. For now, I'm having to manually review all new member requests (still getting registrations even with the hCaptcha).
Any idea why practically every one of the spam bots came through with a Spam Defense of 1? Seems like I can't really rely on that feature at all, which is disappointing. Unless I'm missing something.
One additional question... if I delete the spam accounts, does the IP ban still exist, or could all these bots come back? I hate that my websites membership # is inflated with all these bots and would prefer to delete the accounts outright.
Thanks for the recommendation! Looking into this now