Apr 9, 2018

Don't use standard URLs for comment forms.

Most comment spam is automated, and they go out to WordPress and other blog sites and just attack the form directly. 

This is why you will sometimes see comment spam even if you have comments removed from your template. 

If the comment file (usually called comments.php) exists on your site, spammers can and will use it to post spam comments to your blog. By changing the file name to something else, you can block these automated spam bots.