It's not just the Chinese. My spam logs suggest it's also the Russians and Indians in great number and then there's a large gap before reaching the USA and some

It's not just the Chinese. My spam logs suggest it's also the Russians and Indians in great number and then there's a large gap before reaching the USA and some European countries. Besides, do you believe you'll never have any valuable users from those places? IP blocking is proving to be the most successful thing I've got going. I do like to make it forget IPs after a while as they could just be temporary. Most of my IP blocks I apply for a month, it's an entirely arbitrary time period I know. I did do an experiment and captured all registrations and form submissions for a day and looked at the data. The only pattern that ALL spammers that day could be identified by was their password. The password was either '0' or '[a-zA-Z0-9]{10}'. Unfortunately I can't just block those patterns as I have no idea how many real users would be affected by such a thing. Obv' I don't have their passwords and just store hashes, and I don't normally transmit a password except for noscript graceful degradation. So basically... whilst I was pleased to find a pattern it's not one I can implement against without doing something undesirable elsewhere.