we already had captcha enabled via the IPB forum settings, i've now flipped it to use hcaptcha based on your recommendation,
we have pages and pages of these signups (442 or so since early june) so I'm not going to manually ban+flag spammer on each of the signups that's nuts,
what we've done is to block the most common ranges seen trying to sign up from Russia, using iptables on the server level, that seems to have contained it for now,
thanks
if anyone wants a CSV file with these ips, here they are
Members possibly russian not validated yett.csv