About 10 seconds of Googling also showed that adding a field (and possibly hiding it from the user) that simply says "Leave this blank" as part of the sign up can help filter out bots.. Right now you have literally nothing to stop bots from signing up.