I've recently disabled forum registrations in the host settings, but a (I think) bot has still been able to create an account. Any ideas on why this is happening and how to stop it?

Looks like the register page can be accessed even when registrations are disabled. Issue will be fixed in the next release (3.2.1)