Last night our forum was attacked with spam for a hour by around a dozen new forum accounts, although my mods were flagging as spam and hiding, as quickly as they did a new user and spam appeared. In the end I took us offline to clear it and banned users, reopened but closed registrations for the night. It appears to have been one individual, although they used multiple email domains and IP address to register they all showed as a specific location in India.
I already had hCapture, a security question from choice of three questions and Email validation. I assume they need some manual input to clear? Today I have changed the security questions and added a few more questions. Is there anything else I can do to force more rigorous manual intervention to make it annoying for a spammer to slow them down if not stop them?
Thanks. Ashley.