Crafu

I have the same problem
So I’ve downloaded this plugin- Analytics Spam Blocker
It’ll add some updates to your .htaccess file.
Enabled it.
Copy the contents of the file, then disable it.
Then go back and manually update the file with the sites you wish to block.
Save and that should be you.
If you leave it enabled, then updates to it will wipe off any changes you make.
So far, it’s stopped the rouge entries reoccuring in my analytics.
If you get any new ones, then just add them as new lines to thie htaccess file and you should be good to go.