@klconover You have a latest version of WP and akismet? You can also take usernames and blacklist 'em. In severe cases, even IP addresses.