Does anyone know if it is possible to, say, prevent the creation of users with numbers in the username? That would weed out 90% of the spambots right there.
Maybe one can configure BadBehaviour to do that? I have that installed (it might be what's preventing them from actually posting spam).