The Spam Prevention module tracks all user actions that have been rejected due to being flagged as spam. It lists the date, IP address, the module that rejected it, the visitor's unique id number, whether they were a new visitor or not, their PHP session, and the reason. It also lists if the action was 'twisted'. If it is twisted, that generally points to an invalid security or captcha code.