registration uses question and answer yet server is getting nailed by dozens of image

[محروم.كوم]

The site is set to use questions and answers for registration
yet the server load is being run up by dozens of convert commands as if it was rendering the captcha images

Quote:
00 | \_ sh -c '/usr/bin/convert' -size 201x61 xc:white -font "/home/SITE/public_html/forums/images/regimage/fonts/WetPet.ttf" -pointsize 32 -fill "rgb(0,0,0)" -annotate 0x0+10+40 "vBulletin" -flatten -stroke black -strokewidth 1 -fill none -draw "rectangle 0,60 200,0" -depth 8 PNG:"/tmp/vbKzMAH3" 2>&1
nobody 15420 4.0 0.0 69116 3196 ? Rl 11:32 0:02 | \_ /usr/bin/convert -size 201x61 xc:white -font /home/SITE/public_html/forums/images/regimage/fonts/WetPet.ttf -pointsize 32 -fill rgb(0,0,0) -annotate 0x0+10+40 vBulletin -flatten -stroke black -strokewidth 1 -fill none -draw rectangle 0,60 200,0 -depth 8 PNG:/tmp/vbKzMAH3
nobody 15311 0.7 3.8 351280 155888 ? S 11:31 0:00 \_ /usr/local/apache/bin/httpd -k start -DSSL


Im guessing some script is attempting to register by directly hitting the reg code - Is there a way to turn this off ?
Ive renamed the WetPet.ttf since its twice the size of the other fonts and its the only one thats being called

Thanks in advance __DEFINE_LIKE_SHARE__