Riccardo Rosignoli

🛡️ DigitaleZen AntiSpam Shield for CF7 is a lightweight yet powerful plugin that protects Contact Form 7 forms from spam, bots, and suspicious submissions.
It combines a multi-layered defense system, including:
<ul>
<li>Invisible honeypot field</li>
<li>Hourly-expiring SHA256 token</li>
<li>Automatic flood protection</li>
<li>Temporary IP firewall</li>
<li>Real-time blacklist updates every 24h (StopForumSpam, Spamhaus, SpamCop)</li>
<li>Advanced CSV logging</li>
<li>Interactive dashboard with chart and bot log</li>
<li>Weekly report via email (configurable)</li>
</ul>
<blockquote>
✅ No complex setup. No CAPTCHA. No data collection. 
 Works out-of-the-box.
</blockquote>
<h3>Features</h3>
<ul>
<li>🔐 Invisible honeypot protection </li>
<li>⏱️ Minimum send time (4 seconds) </li>
<li>🔑 SHA256 token valid for 2 hours </li>
<li>🧱 Soft IP firewall (10-minute ban) </li>
<li>📩 Dynamic blacklist: IPs, emails, domains, keywords, usernames </li>
<li>💥 Flood protection: 3 submissions = auto ban </li>
<li>🧾 Detailed logging (date, IP, email, reason, trigger) </li>
<li>📈 Interactive chart of blocked spam by type and timeframe </li>
<li>📬 Weekly email reports </li>
<li>🧘 Clean and minimalist DigitaleZen-style UI </li>
<li>🔒 Admin-only dashboard access</li>
</ul>
<h3>External services</h3>
This plugin periodically downloads an updated anti-spam blacklist from a service operated by DigitaleZen and hosted on Google Apps Script (domain: script.google.com).
• Purpose: fetch a JSON list of abusive/disposable emails and domains used by the plugin’s firewall checks. 
• When data is sent: once per day via WP-Cron (and when an admin triggers a manual update). 
• What data is sent: no form submissions and no user personal data are sent. The request is server-to-server (HTTP GET) and only standard headers (e.g., User-Agent) are included. 
• Storage: the downloaded JSON is stored locally within your WordPress site (e.g. under wp-content/uploads in a plugin-specific folder).
Provider policies (service owner): DigitaleZen — https://digitalezen.it/terms/ • https://digitalezen.it/privacy-policy/ 
Hosting platform policies (infrastructure): Google — https://policies.google.com/terms • https://policies.google.com/privacy

DigitaleZen AntiSpam Shield for CF7

The ultimate shield for Contact Form 7. Blocks spam with honeypots, tokens and a live blacklist—no CAPTCHA.

Denis V (Artprima)

AP HoneyPot WordPress Plugin, based on Jan Stępień’s http:BL, allows you 
to verify IP addresses of clients connecting to your blog against the Project 
Honey Pot database. Thanks to http:BL API you can quickly check whether your 
visitor is an email harvester, a comment spammer or any other malicious 
creature. Communication with verification server is done via DNS request 
mechanism, which makes the query and response even quicker. Now, thanks 
to AP HoneyPot WordPress Plugin any potentially harmful clients are denied 
from accessing your blog and therefore abusing it.
<h4>Your Feedback Matters</h4>
Bugs to report? Feature requests? Criticism? New ideas? We want to hear from 
you! Do not hesitate. Get in touch with us and share your views.

AP HoneyPot WordPress Plugin

Hard to believe I've been using this fro over 3 years, and the previous one before for even longer. No I wonder this is still being maintained, but still using in the meantime. 

Updated 3 years ago and still works great

AP HoneyPot WordPress Plugin allows you to verify IP addresses of clients connecting to your blog against the Project Honey Pot database.

DigitaleZen AntiSpam Shield for CF7 vs AP HoneyPot WordPress Plugin