That appears to have made things worse. I renamed wp-comments-post.php as indicated in the link you mentioned and installed the Bad Behavior plugin (v2.0.15). Now not only am I still getting the bogus comment records, but I’m also getting junk in the wp_bad_behavior table!