Sabre isn't stopping spam / robot registrations

Hi there,

A few months ago, one of my WordPress sites started to get hit by spam registration bots. First, they hit my forum’s registration, so I had to turn off registration there for a while.

Then they moved to the main site which runs on WordPress, and suddenly I was getting hundreds of WordPress spam registrations a day. I had already had Sabre installed for some time and had the stealth Javascript checks on, the check to make sure enough time was spent on the registration form, user e-mail confirmation, and a CAPTCHA. Somehow they were getting through, so I was forced to turned off registration for a while, and when I turned it back on a month later they had moved on.

A separate WordPress site of mine, on a different server, started seeing this exact same problem last week. No matter what settings I use, the registrations get through. I can’t figure it out, I can only guess that maybe there’s an army of actual people out there who go around registering spam accounts for whatever reason.

Any ideas on what I can do? Up until this started, I loved the plugin, it worked like an absolute charm. I always keep my WordPress versions up to date and take server security and permissions seriously, so this has me stumped.