spam attack,how to disable this spam user activation

I have been under a spam attack. how to disable this user activation. and also i want to know how tha spam user activate there email and captcha.the spam user mail id like hh.h.h.01h.hhh@xxx.com ,hhh.h.hh.0001@xxx.com
so help this needful