I'm quite sure it has to do with zenphoto, I can see it in the logs. Typical behavior is as follows:
random URI has get request from an IP
some other IPs get the URI as well
followed by hosts that each do about 2 requests with POST and then disappear
the strange thing is that akismet does not seem to catch any of those spam comments?
I did not get mod_security working to log the post parameters. I decided to try and give Mollom a shot, I now have that running. Plugin code is below, code is free to use under GPL license. It requires the PHP class from http://mollom.crsolutions.be/
And thanks for the great API, implementing this was very. I'll keep you updated with the results!
I am now wondering whether I will replace the regular captcha code with the mollom captcha. Might be interesting for other users too, but then the captcha code needs to be turned in a plugin as well.
Sure, see ticket http://www.zenphoto.org/trac/ticket/919
I will be posting mollom based CAPTCHA code too, it keeps my site spamfree at this moment (but comments continue to work). Which is how I like it.
I have also posted a ticket with the CAPTCHA generator code, the combination of both stops all spam here! Ticket is http://www.zenphoto.org/trac/ticket/920
Still needs works though, because an option to choose the CAPTCHA generator needs to be in place if you want to keep the current generator working.