Naw, that was my bad guys. I approved the account because it appeared to be a legit member. This wasn't a failure of the board. Usually a spambot starts spamming immediately so I can catch one I approve right away because I click approve and then check new posts to find a spam post from them and then delete them, so it takes a minute to screen a new member who looks legit. In this case the spambot did nothing for days after approval and then cleverly waited until it knew I was asleep to strike. And boy did it. 17 posts in about 7 hours.