Richard Phillips

SpamScrubber helps block bots and spam submissions by: 
– Adding a customizable delay to all form submit buttons. 
– Obfuscating form actions for non-JavaScript users. 
– Adding a honeypot field (with customizable label) to trap bots. 
– Blocking direct POSTs by requiring a JavaScript token. 
– Providing admin stats for various spam attempt types.
<h3>License</h3>
This plugin is free software released under the GPLv2 or later.

SpamScrubber

A simple and robust anti-spam plugin that adds a submission delay, JavaScript token, and a honeypot field to your site's forms.

Jeff Sterup

This plugin allows you to automatically insert your Project Honeypot links into all of your pages and block IP addresses that are listed on the Http:BL list from Project Honeypot. There is an option to block IP addresses that have been blocked by Spamcop using their blacklist and the SANS Internet Storm Center API as well. 
To prevent bots from using brute force attacks and scanning your site there is an option to block users that fail to login a set number of times or use blocked user names. You can also block IP addresses that generate a large number of 404 errors. This plugin will also prevent WordPress User Enumeration and automatically block anyone attempting it.

Honeypot Toolkit


This plugin does the job very well. Besides using Project Honyepot and Spamcop, I really love the additional Login and 404 handling that protects from brute force attacks. In combination with a 2FA login plugin this makes me finally feel a lot safer using Wordpress. Thanks a lot!


Amazing! A must have for every site!

Automatically insert Project Honeypot links into your pages and block IP addresses that are listed on various block lists you can choose from.

SpamScrubber vs Honeypot Toolkit