10
I updated the User Profile Module to 1.86 Final @ noon.
I confirmed both:
3) In the Profile module, go to Admin and in the Basic step located at:
/modules/profile/admin/step.php?id=1
set the "Save after stop" to "No"
4) Starting with XOOPS 2.5.7, in Preferences for the Profile module, set the "Use Captcha after the second Registration step" option to "Yes" (it is the default)
40 minutes latter I have still received 15 spam messages.
I had 100 last night.
What else can I try?