I've added security question on registration and another plugin which will prevent you from adding a website to your profile if you have no posts. Most spam bots are just doing that so it will at the least make their registration useless. If the problem persists I'll add more, if the spam bot posts just report it.