Time for moderated comments?

Apparently somebody just hand-spammed some comments in. I suppose they might have auto-broken the captcha: the new ones aren't very good. Or perhaps captchas aren't working properly.

Do I need to turn on comment moderation? Upgrade the captcha system? Limit comments to authenticated users (I hate this idea)? What do folks think?

Followup: It just happened again. Next time I turn on moderation for anonymous comments. It doesn't make me happy, but… (B)