maybe this will help: http://dean.edwards.name/weblog/2005/01/wordpress-spam2/ This does take some editing of files. I don't know of a simpler way to turn it off. There may be a plugin though.