mediasushi                        

After a long dry spell, I'm beginning to see a spam run on the site again. So whilst it seems to be coming from all manner of IP addresses, the one thing common it has is that it has the same User Agent: Mozilla/4.76 [en] (Win98; U). The style/pattern of the spam run is that the user seemingly surfs to a particular page on the site from one IP address and then it is immediately followed by an attempted comment spam from another IP address so keep a look out for them in your server logs.