And I followed best practices to set it up.

Including email confirmation for registering accounts, post limits for new accounts, initially being allowed only to the entry area where one has to post and introduce themselves to be allowed elsewhere?

In my childhood these were the basics.