Took care of the latest spam, and deleted the poster plus several suspicious-looking new users. Also upgraded to a new release of WordPress and BBpress, which temporarily broke the site, but I think it’s back now.
The time between when that users signed up and when the spam showed up may have been no more than a few minutes, so it’s time to look for a different anti-spam tool, if only to slow things down again. (Spammers have lists showing how to access specific sites, so changing the anti-spam tool should make the list entry incorrect.)
As a result, I’ve switched to a different ‘recapcha’ form for new subscribers, we’ll see if that cuts down on the number of spammers/robots signing up. (I think it may also be an easier one for humans to use.)
It is currently set up to require the captcha code at signup, when logging in, and when posting. That may be overkill, if so, I may be able to relax the rules a bit.
This reply was modified 2 years, 4 months ago by htfoot.