Amazing we made it this long without something like this happening... Even weirder -- looks like a direct hack on the 'new thread' form submission.
- there is no IP to check
- IPs are attached to user accounts
- there is no user account attached to this post
So... maybe I should look over the form handling code (but this lazy admin might just wait until the spam pandemic lets loose).