• I’m using WordPress v2.0.11 self-hosted on FreeBSD. I have spam moderation enabled and am using Akismet 1.15 and Sociable 1.2 plugins.

    For several weeks now, I have been regularly getting bogus comments added to the wp_comments table (with IDs > 42000). I did not moderate these comments, and they don’t show up in the dashboard, comment editing page, or in the RSS comments feed, but they do seem to infect the Incoming Links info and wp_options table.

    I was previously using WP v2.0.4, and I have upgraded to 2.0.11, changed WordPress, all database, and FreeBSD account passwords (there are no FTP logins on the account). I’m pretty sure that neither the FreeBSD or WP account have been compromised, and only local access to mysql is enabled.

    I can delete these comments directly from the mysql database, which eventually results in wp_options getting cleaned up for a while, but they keep coming back. Any ideas on how to prevent this? Thanks.

Viewing 3 replies - 1 through 3 (of 3 total)
  • These can occur from the wp-comments-post.php being used directly. Some spam bots take advantage of this. Here a some instructions to help. I also recommend using Bad Behavior, it’s available in the plugins section here, it usually stops most spam bots in their tracks before even reaching your site.

    Thread Starter kak1

    (@kak1)

    That appears to have made things worse. I renamed wp-comments-post.php as indicated in the link you mentioned and installed the Bad Behavior plugin (v2.0.15). Now not only am I still getting the bogus comment records, but I’m also getting junk in the wp_bad_behavior table!

    i use wp-spamfree – and it saves me 300+ plus per day comments

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Recurring spam comments’ is closed to new replies.