Auto Comment on New Post (SPAM)

They’re submitting a comment to a nonexistent post ID, which are being inserted in the database but don’t display until you actually post an article using that ID. If you use phpMyAdmin or other MySQL tool, you can whack them from there.
If you’ve updated to version 1.2.2 of WordPress you should be protected from this in the future. If not, see this for a solution:
https://www.tamba2.org.uk/wordpress/spam/#seven

Is it confirmed that being able to comment on a non-existing post has been fixed in 1.2.2? I haven’t seen that mentioned anywhere.

OK, this is correct. My friend’s site was attacked from the same spamming system. I found a good solution to stop the flood. See https://www.biolatti.it/frustagume/
In this site I added a simple question to which Users must answer correctly before submitting the comment, e.g. the result of an arithmetical operation (very simple). I added a text field to be filled with the right value. If the field passes an empty string, or a wrong value, the comment is refused. I put a bit of code to process this data in wp-comments-post.php. If you like this solution, I’ll give you all details

tagliamax – if you want to write up any solution for other WP users, I can include it at https://www.tamba2.org.uk/wordpress/spam
It’s a fight where all weapons are useful ??

Ah, so it’s like this: https://www.syndic8.com/~jeff/blog/index.php?p=103

Thanks for your interest. As soon as possible I’ll post my solution. Now my main problem is to write in an understandable English… ??