Recover password spammed

I have problem with a bot that keeps on issuing recover password to the system and now the system is jammed full or password recovery reply.

How do i put antisplog/ recapcha on this?

Sam