With reCaptcha installed, the majority of bots should be locked out now. Although some bots send the requests to humans for verification, and these bots will still get in unfortunately. However there's a way to block these as well, and I've sent the details to Dylan.