I haven't seen much if anything getting past our pretty simple proof-of-work challenge but I imagine it's only a matter of time.

Thankfully, so far, it's still been pretty easy to block them by their user agents as well.