I work for an educational institution, and we are seeing entries from our admissions application that amount to spam. Currently I only have one honeypot applied to thwart the spam bots, but these entries looks like input from actual people. There is no garbled text in input fields, no crazy links, just regular names, social security numbers that are all very similar if not duplicates, phone numbers that are very similar, and they may or may not leave an email address. Cities do not match the states. Addresses are non-existent.
It is an online form, using SQL Server and C#, ASP.NET. However, the application submissions go directly to another server. We don't store anything in SQL. I'm not sure what other kind of details to enter.
How can I guard against this type of spam, if possible?