I have same problem on my own SME forum, and it happens on all 1.1.X versions.
The default Visual Verification is completly unsecure and does not stop at all and it even show the same letters for a new request for some reason (why does they not change?)
On my forum I added a extra puzzle anitobot measure for hope to stop this registreing attack as well.