If spam is a problem in comments try this combination: Require login to comment (in WP discussion settings), allow Social connect (through a registered profile) and this plugin to limit login attempts.read more
WordPress website security, protection and prevention includes preventing brute force login attempts, comment spam and form spam, keeping regular backups and having a secure maintenance mode. Additional security includes scanning and fixing code vulnerabilities and a firewall to prevent malicious code actions.
Read more about WordPress website security, protection and prevention.
Wordfence Security is my preferred solution. It has an easy and automated scanner that check for malicious code and can compare the WordPress, Theme and Plugins files with the original WordPress library, allow you to view the differences and revert to original version of file or delete it. Wordfence has a firewall preventing malicious scripts from operating, a built in traffic log which allows you to block bad IP addresses, a method to automatically limit fake crawlers and limit and block login attempts by hackers.read more
By the same plugin authors as BackWPup website backup plugin. The older and more popular Maintenance Mode 5.4 plugin had not been updated in over two years and was causing conflicts with the BackWPup Plugin.read more
See Really Simple CAPTCHA shortcode for Contact Form 7 (CF7) integration. CF7 has replaced this plugin with WP ReCaptcha Integration, which is an anti bot tick box, an easier alternative for users than to decode a captcha image.read more