FYI, if there is a challenge question asked when one signs up, change it (and the answer, obviously). Once a challenge question is figured out it goes into a spammer database so the bots can harvest it.
If there isn't a challenge question for registering, add one (and change it periodically; don't leave it stagnant)