Having issues with a client site getting hit with a ton of spammed malware comments. I turned off comments in my prefs, deleted the comments code from my theme and I'm using plugins like AVH F.D.A.S. to combat. Nothing works. Still getting hit.
It's entirely happening on attachment pages. Not on traditional posts or pages. Any idea where else I can look to stop comments coming in?