I recently set up a doku installation on my personal site and I must say, it's a magnet for spam bots. Tried the reCAPTCHA plugin, but still had bots getting through. Got rid of that and tried the other CAPTCHA plugin that is widely used, and along with tweaking some doku settings, that seemed to do the trick.