Just sort of a follow up. I have Bad Behavior mod installed, questions in place of Captcha, and CloudFlare setup. It has reduced the spammage a good amount, but not completely eliminated it of course. Its not stopping the human spammers, but the bots are way down.
One weird thing with CloudFlare was a common search term to find our site usually resulted in us being the 3-4th listing on Google. Within 24-hours of the DNS change, we plummeted many, many pages down the list. My host tells me this is common with an initial roll over to CloudFlare and to give it a little time. CloudFlare positively swears its an amazing coincidence. Anyone else experience this? Which is correct?