jammycakes

Three Strikes and You’re Out examines your Bad Behavior logs and your WordPress 
spam queue and closes comments on all blog entries across the board to IP 
addresses that have reported three or more attempts at mischief over the past 
seven days.
It also has an additional logging feature and an API that allows other plugins 
to register certain events as being mischievous.
<h3>Configuration</h3>
By default, Three Strikes and You’re Out closes comments right across the board 
on your blog to any IP address that has attempted any mischief three or more 
times in the past week. You can change these by editing the two defined 
constants at the top of the plugin file, just below the copyright notice. There 
are three such defines:
<ul>
<li><code>THREE_STRIKES_LIMIT</code> is the number of bad hits at which to block comments.</li>
<li><code>THREE_STRIKES_TIMEOUT</code> is the time in seconds after which bad hits are no 
longer considered.</li>
<li><code>THREE_STRIKES_BB_STRICT</code> indicates that you should consider any “strict” 
events recorded in the Bad Behavior log. These are events that are blocked when 
Bad Behavior is using the “strict checking” option, but would be ignored 
otherwise.</li>
</ul>
<h3>The Three Strikes API</h3>
This plugin includes a number of hooks that allow other plugins to communicate 
with it. These are implemented as actions and filters, so if Three Strikes is 
not installed, your plugin will continue to function.
Full details can be found at
http://www.jamesmckay.net/code/three-strikes/api/
<h3>Redistribution</h3>
Copyright (c) 2007 James McKay 
http://www.jamesmckay.net/
Permission is hereby granted, free of charge, to any person obtaining a copy 
of this software and associated documentation files (the “Software”), to deal 
in the Software without restriction, including without limitation the rights 
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 
copies of the Software, and to permit persons to whom the Software is 
furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in 
all copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR 
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, 
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE 
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER 
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, 
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE 
SOFTWARE.
<h3>Reporting bugs</h3>
When reporting bugs, please provide me with the following information:
<ol>
<li>Which version of Three Strikes And You’re Out you are using;</li>
<li>Which version of WordPress you are using;</li>
<li>The URL of your blog;</li>
<li>Which platform (Windows/IIS/PHP or Linux/Apache/MySQL/PHP) your server 
is running, and which versions of Apache and PHP you are using, if you 
know them;</li>
<li>The steps that need to be taken to reproduce the bug;</li>
<li>If possible, any relevant information on other plugins or configuration 
options that you may think appropriate.</li>
</ol>
See the following blog entry for further guidance on troubleshooting and 
reporting problems:
http://www.jamesmckay.net/2007/04/how-to-report-issues-with-wordpress-plugins/
<h3>For more information</h3>
For more information, please visit the plugin’s home page:
http://www.jamesmckay.net/code/three-strikes/
The Mercurial repository and issue tracker for this plugin are at:
http://bitbucket.org/jammycakes/three-strikes/

Three Strikes and You're Out

Closes comments across the board to IP addresses that are behaving badly.

webvitaly

kudlav

This is fork of successful Anti-spam plugin v5.5 written by webvitalii, for more info visit <a href="https://github.com/kudlav/anti-spam/" rel="nofollow ugc">GitHub Fork</a>. 
From version 5.6 maintained by kudlav.
<ul>
<li><a href="https://github.com/kudlav/anti-spam/" rel="nofollow ugc">GitHub</a></li>
</ul>
Anti-spam Reloaded plugin blocks 100% of automatic spam messages in comments section and also blocks all trackbacks.No captcha required.
Plugin is simple and easy to use: just install it and it just works.
Blocked comments can be stored in the Spam area and converted to regular comments if needed.
Anti-spam Reloaded plugin is GDPR compliant and does not store any other user data except of the behaviour mentioned above.
Plugin blocks spam only in comments section.. 
Plugin does not block manual spam (submitted by spammers manually via browser).
<h3>Compatibility</h3>
All modern browsers and IE11+ are supported. 
Anti-spam Reloaded plugin works with disabled JavaScript. Users with disabled JavaScript should manually fill current year before submitting the comment.
Server compatibility:
<ul>
<li>WordPress 3.3 – 6.5</li>
<li>PHP 5.6 – 8.2</li>
<li>Doesn’t use jQuery</li>
</ul>
Plugin is incompatible with:
<ul>
<li>Disqus</li>
<li>Jetpack Comments</li>
<li>AJAX Comment Form</li>
<li>bbPress</li>
</ul>
If site has caching plugin enabled and cache is not cleared or if theme does not use ‘comment_form’ action 
and there is no plugin inputs in comments form – plugin tries to add hidden fields automatically using JavaScript.
<h3>How does it work?</h3>
The blocking algorithm is based on 2 methods: ‘invisible js-captcha’ and ‘invisible input trap’ (aka honeypot technique).
<h4>‘invisible js-captcha’</h4>
The ‘invisible js-captcha’ method is based on fact that bots does not have JavaScript on their user-agents. 
Extra hidden field is added to comments form. 
It is the question about the current year. 
If the user visits site, than this field is answered automatically with JavaScript, is hidden by JavaScript and CSS and invisible for the user. 
If the spammer will fill year-field incorrectly – the comment will be blocked because it is spam.
<h4>‘invisible input trap’</h4>
The ‘invisible input trap’ method is based on fact that almost all the bots will fill inputs with name ’email’ or ‘url’. 
Extra hidden field is added to comments form. 
This field is hidden for the user and user will not fill it. 
But this field is visible for the spammer. 
If the spammer will fill this trap-field with anything – the comment will be blocked because it is spam.

Three Strikes and You're Out vs Anti-spam Reloaded