Users that don't have their accounts activated yet?

[Petie]

All new accounts have to be activated by confirming the email address that was entered at registration. It can help to prevent spam as users who aren't activated can't post but most decent bots can check for and confirm those emails anyway so it's only a small part of the larger puzzle. Generally, bots are going to get through and then it just becomes a game of manual removal.