blog spammers

how do these folks post? I ahve only registered users can post and then i also set anyone can register. I start getting the spam comments(which get moderated). I delete them..then i check the users lists and they aren’t there. so if i have it restricted to only registered folks can post how are they able to post when they don’t register? I am running hte latest version.