Eric,
Try to post a comment and note the URL to see where general-comments is mounted.
Also check the lars-blogger admin page and see if "trackback" is enabled. Trackback was a feature to allow comments to be posted to your site by a web api. It doesn't require authentication, so it is easy to post spam comments that way.