Thanks Greek! Here is some more information, based upon your findings:
These domains are getting links through an auto comment spammer and forms spammer. I get TONS of daily hits from some of these addresses – specifically:
plone4artists.org
genres.syr.edu
Others are:
ikit.org
zopeuk.org
shalem.org
panarchy.com
honathonblock.com
pulseofscience.org
The IP address that this comes in on is always the same, so this person is likely using the program either from a server or their own PC. I will trap the IP once again in the next several days to ensure I have the right one before posting it 
I have a few spammers and I have all their IP’s trapped, but do not have them interlinked to their domains that they are spamming.