3
nachenko is correct..
Isolate which module it is.
Check your module settings and check if annonymous users have the right to post. In forums it would be annonymous posts...in News it would be Allow Comments...etc.
Your assumption is right, its a simple adjustment that is actually quite effective against such postings.