I think I found the login to comment culprit. What a way to spend my lunch time! Oh well. When I thought back to the spam attack I remembered that I had been a little bit hyper about trying to filter that stuff out. I found the control that I used to do that; the problem should be corrected now. Ironically, it did nothing to stop the spam.