Did you try using the stop forum spam configuration in Protector module references to automatically blacklist spam users, and other hack prevention measures in protector? That works good.
Wordpress, Joomla and Drupal are the top three of course.
But apart from that... What's wrong with using the regular xoops news module for blogging?