mte90, 27 days ago

@Edent wordpress zero antispam is the best option as does a lot of check without using a third parrty provider like akismet

Edent, 27 days ago

@mte90
I'm using https://wordpress.org/plugins/antispam-bee/ which catches most of them.

gwire, 27 days ago

@Edent They're going to be speculatively submitted as “POST /blog/wp-trackback.php” even if the individual posts have no appropriate meta links.

jackmcconnell, 27 days ago

@Edent Do you have XMLRPC enabled? Or an end point, like the WP REST API available?

Edent, 27 days ago

@jackmcconnell ah, yeah, I think I do.

mattround, 27 days ago

@Edent I'm guessing they're testing to see if that then shows up on a public site, without the risk of getting the actual spam domains banned..?

Edent, 27 days ago

@mattround yeah, that makes sense. I wonder if there's any way to stop it. I can't work out where it is submitting from.