Quote Originally Posted by andreasnrb View Post
There was a comment form so I think they used it. All spam comments came from one specific attachment.
But like I said. I don't want attachments to be pages at all which ain't fixed with changing templates =).
It really is a stupid feature.
Well, you've got two different issues:

1) Not wanting all attachments to have pages created for them by default, and
2) Wanting to prevent comments from being submitted from attachment pages.

Modifying your templates using ! is_attachment() appropriately (and, if necessary, blocking no-referrer comments in .htaccess) should resolve the second issue.