Settings > General > uncheck “Anyone can register”.
If you are getting spammed despite all your said then it’s likely being done by human spammers, which really there isn’t much you can do about since that will thwart almost any method to automatically block spam.
