I have a script to generate a list of all the ip addresses trying to create multiple new users from which I can easily ban all the bots in the future. It looks like the security question is working because I do not see any new bot user id's yet.

The server is now only using half of it's resources. I'm going to spin up another instance of the web server to speed up performance even more.