ls.net

The first thing you should do with a Drupal website is close the door. Administer > User Management > User Settings > Only site administrators can create new user accounts.

I waited three days and found my site had hundreds of "users" who had posted hundreds of comments. Google searches our servers every hour or so and any new site will be found by spammers within an hour or two.