Strange thing for me is that I just get registrations from what I believe to be bots considering that the email combination is similar to the spam bots I see trying to relay through me mail server. But they don’t ever do anything else after registration such as posts or comments. Nothing! I have my blog setup to allow guests to post comments but I have to approve it. I use the picture captcha for registration, which apparently allows for a few bots and once registered in order to login you have to check the email provided at registration. Once wordpress notifies me of a new registrant I send an email to them to verify they are human if the email address looks strange such as [email protected] and then delete the account after a while if they don’t verify. That’s the best I can come up with.