Unless you have Russian users visiting your forum, I would just simply block any .ru (and most other former Soviet territory) e-mail and hostname from being able to post on your forum.

Reduced the spam on my forum tremendously. Now, once a month, I just simply delete all accounts in "awaiting activation" status because those are Russian spammers trying to create an account but have been blocked.