Wordpress experts, stopping comment spam
 

Ok, I've done everything to try to stop these fucking faggot spam bots from posting comments...I did all the obvious shit...renamed all comment files, disabled all the posting abilities in the admin, etc and I still get 1000+ per week. How do you stop these fucks?

have you tried the akismet plugin?

+111111111111

Use a captcha make it pretty decent, but not too hard and that will stop it pretty much. It's all bots. And though scripts can now read captcha's, I use them and it immediately cut it from thousands a day...to none.

And maybe also add this one:
http://www.herod.net/dypm/

But I'm not sure if it works with the newer wordpress versions

Like Gasper said Askimet is the way to go. I have a blog that was getting around 200 spams comments a day. I put Askimet on it and now only 1-2 get through.

Try the RegisterPlus plugin, make sure old and new posts do not allow comments from unregistered users (that's an easy way for spam to come in on old posts), and double check your global commenting rules (which I'm sure you have). RegisterPlus will even let you customize your registration page a bit.

just install Simple Trackback Validation plugin...

Wow, this is very usefull, bumppppppp! :D

Everything above or simply forbid links in all fields of the comments.

Akismet...essential!

I always ask how they made that shit so simple to spam

This one seems to be working so far

Thanks for the help, actually this turned out to be a pretty informative thread :thumbsup

akismet, captcha, forcing moderation of all comments, and disabling notification of pending comments works for me.. occasionally i'd stop by and sift for real comments.

one more for akismet

Akismet...and google is your friend.

I use Akismet on every single one of my blogs and never had a problem. Once in a great while I'll have to recheck queue for spam but that's about it.

if you are trying to turn them all of....
have you disabled trackbacks?

no one has mentioned it yet, try akismet

http://akismet.com/

You just need an API key. If you don't have an API key or can't figure out how to get one, then you shouldn't be handling wordpress sites.