Hello, did you remove the database? Spammers are doing this with some softwares, not manually. If you still keep the database, it's possible that they can continue spamming.
If you integrated your qa script into Wordpress, get a full backup of your db and then delete all the qa tables. Also delete all the users at your Wordpress installation.