How to Block Spam Comment Bots in WordPress with Honeypot

The Easiest Way to Block Spam Bots in WordPress
Brittany Wells

Spam bots are small applications developed to scan through the Internet with the purpose of collecting and spreading information. Some will look at sites for email addresses to create mailing lists. In this article, we’ll look closer at the ones that visit your site for the purpose of marketing. These kinds of spam bots will register addresses in analytical tools in the hopes to get traffic from the site owner. They can also input links into your comments in order to build backlinks.

WordPress Comment Spam
Tess Stanford

Ultimately, Akismet is a learning/adaptive system, so reporting missed spam and false positives is a very powerful ally in fighting spam on your site, and the substantial portion of the web Akismet protects. In your case, I suspect that running the 2nd plugin is leading to Akismet getting less data for it to learn from. It’s also important to only mark true spam as so. It’s very tempting to flag some commenters as spammers because you want their messages off your site, but if they’re not actual spammers (bots, human mass-marketers, etc), Akismet ultimately figures it out, and can’t take your reports in with as much confidence as it would otherwise.
Reena Downs

Thanks for the more thorough explanation. I think you’ve misunderstood how a honeypot field works. The field must be empty for the form to submit. The spam message is being delivered because the spammer/bot/tester is not filling in the honeypot fields. A honeypot has to trick the bot into filling out those fields, while a regular user wont fill them out because they can’t see them.
Aurea Terrell

The principle of a honeypot is simple — bots are stupid. While some spam is hand-delivered, the vast majority is submitted by bots scripted in a specific (wide-scope) way to submit spam to the largest number of form types. In this way they somewhat blindly fill in fields, regardless of whether the field should be filled in or not. This is how a honeypot catches the bot — it introduces an additional field in the form that if filled out will cause the form not to validate.
Greta Nielsen

You can visit Anti-spam settings page and enable saving blocked comments as spam in the spam section.
To enabled that you need to go to: WordPress admin dashboard => Settings section => Anti-spam
Saving blocked comments into spam section is disabled by default.
Saving spam comments can help you to keep all the comments saved and review them in future if needed. You can easily mark comment as “not spam” if some of the comments were blocked by mistake.

Be the first to comment

Leave a Reply

Your email address will not be published.