I've just started using b2evolution and love it. My business is very locally oriented (united states) however my first two user signups were from .ru domains so I deleted them.
What risks are there in allowing a suspicious users on my blog? If they're not posting trash on my blog, is there really any harm in them having an account?
Welcome to the forum!
Did you disable anonymous comments in Basic antispam plugin settings?
Basic users can't do any harm to your installation other than slowing down mysql operations (if you have hundreds of users)
The main reason you get those users is because spam comments from valid users look more legitimate than visitor comments.