Are you hosting your own installation? I use Akismet and Bad Behavior and they've done a good job of stopping spam. I don't know what wordpress.com has on their backend for hosting, I'd hope they have some strong anti-spam measures in. 4k hits a month ain't too shabby :)