Situation:
http://recaptcha.net
Either every time someone logs in or while signing up. Maybe you could show a captcha every tenth time.