I was doing some testing last night and had all my plugins disabled. In this time I had a whole lot of spam registrations, which I deleted and put all plugins back up. I am using the cat human verification on my create page.
I disabled registration, which was enabled for testing, but I am still getting these spam registrations.
How is this possible? I need to stop these as they are coming through every 30 minutes or so.