WordPress took care of the rest.
26 comments spammed, only 3 leaked through without actually being tagged for me to approve them. 30 seconds thanks to WordPress’s great comment moderation system and poof, they were gone and deleted. Add 5 more seconds to add the one keyword that managed to leak through (“grants”) so there won’t be any spam that gets posted next time around.
Total time wasted: 35 seconds.