[wp-trac] [WordPress Trac] #60161: Comments on pages where comments are not allowed

[WordPress Trac]

#60161: Comments on pages where comments are not allowed
-------------------------------------------------+-------------------------
 Reporter:  is0ph                                |       Owner:  (none)
     Type:  defect (bug)                         |      Status:  new
 Priority:  normal                               |   Milestone:  Awaiting
                                                 |  Review
Component:  Comments                             |     Version:  6.4.2
 Severity:  normal                               |  Resolution:
 Keywords:  needs-screenshots needs-testing-     |     Focuses:
  info                                           |
-------------------------------------------------+-------------------------

Comment (by acurran):

 Log activity may help shed some light. This is a case where the spammer
 keeps spamming a media file. I turned off media attachment pages but still
 keeps happening:

 {{{
 109.248.138.36 - - [26/Jan/2024:11:06:01 +0000] "POST /wp-comments-
 post.php HTTP/1.1" 302 0 "https://www.migrationbureau.com/canada/double-
 decker-bus-57503_960_720/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)
 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-"
 109.248.138.36 - - [26/Jan/2024:11:06:03 +0000] "GET /canada/double-
 decker-bus-57503_960_720/?unapproved=11&moderation-
 hash=f762b6ec4f607d99f195530a6ea0f962 HTTP/1.1" 499 0
 "https://www.migrationbureau.com/wp-comments-post.php" "Mozilla/5.0
 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)
 Chrome/120.0.0.0 Safari/537.36" "-"
 }}}

 and this one is on a different website - commenting & trackbacks is
 disabled sitewide and also on the individual page:


 {{{
 34.71.189.56 - - [26/Jan/2024:09:02:45 +0000] "POST /wp-
 trackback.php?page_id=11/11 HTTP/1.1" 404 59 "-" "Mozilla/5.0 (Macintosh;
 Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko)
 Chrome/114.0.5735.106 Safari/537.36" "-"
 }}}

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/60161#comment:6>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform