Just had to introduce image verification on the "Contact Us" function. A spam bot found the link and has been spitting out emails at the rate of 3 a minute. Flood check slows it down to 1 a minute, but it's been using three IP addresses.
Techno-war. Such fun.