Daniel,
You seem to feel that comment spam would be unusual, but I have switched to CComment Core after using another comment system that did not migrate to Joomla 3.x and that system was plagued with comment spam. Every day I would have to go in and mark comments as spam so that they would not clutter up my pages. The spam comments far outnumbered the legitimate ones.
That being said, I had originally enabled captcha on my site, and specified that it should only be used for Public and Guests. In testing, the captcha authentication was displayed and required entry even when I, as the Super Administrator, would try to comment.
Any thoughts about why that might be?
Regards,
Ryan
PS: I had a log of all the ips that posted spam comments and entered them into the ban list. Hopefully this will cut down on the problem. Can you use wildcards in the ban list? For instance, could I use 123.123.123.* to ban all of the ips in that particular subnet?