I removed the “website” field from the comment form, thinking it would help against spammers. No such luck! Once a blog lands in their database, it seems, it never gets out. Looks like I’ll have to bolt on a CAPTCHA.