spam

Spambot

module_name
spambot
Description

Scans email addresses/usernames/IP addresses against the stopforumspam.com database and then blocks or deletes the accounts.
You can set the threshold - i.e. how many times an email address needs to be listed in the spam database before action is taken.
You can also have it scan your entire existing database, not just new users. (It does this via a configurable cron run.)

Tested with D7.

Categories
Tested by me
Yes
Drupal 8 support
Yes
Essential
Yes
Avoid
No
Deprecated
No

User restrictions

module_name
user_restrictions
Description

Block registrations (wildcards on email address and username)

Useful if you're getting persistent spam registrations from certain domains.

Tested with D7.  This used to be in core in D6.​​​​​​​

Categories
Tested by me
Yes
Drupal 8 support
Yes
Essential
Yes
Avoid
No
Deprecated
No

reCAPTCHA

module_name
recaptcha
Description

Use in conjunction with the Captcha module to prevent spam on forms.
As of Jan 2020, still ONLY supports v2 of Google's reCAPTCHA API (there's an active issue for v3 support)
There's also an option for non-js fallback.

Tested with D7 and D8.

Patch needed for AJAX forms (e.g. Webforms with AJAX support turned on) to stop the ReCAPTCHA UI disappearing when page is reloaded.

Categories
Tested by me
Yes
Drupal 8 support
Yes
Essential
Yes
Avoid
No
Deprecated
No

Captcha

module_name
captcha
Description

Framework for using (many) different types of captchas on forms such as user_registration.
e.g. try 'reCAPTCHA' which is Google's "I am not a robot" captcha.  Personal experience is that's much better at preventing spam than the standard "image" one.

Tested with D7.

Categories
Tested by me
Yes
Drupal 8 support
Yes
Essential
Yes
Avoid
No
Deprecated
No

Honeypot

module_name
honeypot
Description

Adds spam prevention to forms (you can select which, including user registration and contact).

Recommended settings:

- turn logging on (look for entries of type = honeypot in /admin/reports/dblog
- if using time limit - i.e the minimum amount of time form is expected to be on screen before module things it's a real person, not a bot, suggest 5 seconds rather than 10 (too agressive when using browser autocomplete for, for example, email address on password reminder form)

Categories
Tested by me
Yes
Drupal 8 support
Yes
Essential
Yes
Avoid
No
Deprecated
No

Mollom

module_name
mollom
Description

DO NOT USE - security issue and Acquia will no longer support or maintain it.

Spam filtering SaaS from Acquia. Free for up to 50 "ham" messages a day.  Scans message then provides a captcha if appropriate, scores each message for reputation, spam etc.  I never tried this module and anecdotally I've seen mixed reports / people suggesting it's not all that good.

Categories
Tested by me
No
Drupal 8 support
Yes
Essential
No
Avoid
Yes
Deprecated
Yes