If the "/2224" is pulled from a database, check all the data in all the tables. I may be a bit paranoid, but I would think that my CMS somehow got hacked and some script-kiddie managed to push crap into my data.
AFAIK, there is no CF9 or Linux reason for the 'ugly' URL parameters. Have you contacted your host service about this?
I know AddThis puts params like this onto urls for analytics. - See more here What is Address Bar Sharing Analytics?
The /2224/ gets plugged into index.cfm?post=2224 in .htaccess. This is to make better looking URLs.
IMO, gallery/index.cfm?album=parent&photo=123 is uglier than /gallery/parent/123
haxth: YES! I do use addthis! And YES! That was it! I changed the argument to false, because honestly, NO ONE looks at my blog!
Wow, I've been racking my brain over that for MONTHS! Thank you very much!