How to block a spam attack?

To be clear, these are human beings, so they will easily bypass any Capcha. You need the official Akismet plugin to block them based on Bayesian content filters.

(Can also block by IP, but they have a lot of IPs…)