Mine are bots, also. Hardly any of them are on content pages. Almost all of them are on attachment pages for photos and images. 85% of them are knock-off shoes, handbags and sunglasses, despite my blog having never once posted about fashion. (Absolutely not my Earl Grey for a blog.)
All of these quit before 3.6. Whatever changed there gave them all access again.
The number of comments filter is definitely working. I am only seeing the same IP addresses three times before they are gone.