I'm currently using the Honeypot module for blocking spam and it does a great job at blocking bots but too many human spammers manage to get through. I tried Mollom but that blocks out too much ham which is definitely bad for me. What can I use in addition to honeypot to block human spam?

  • From what you say, my guess is your problem is not with bots but with humans. So you may need to be more cunning in how you moderate registration. There's an interesting discussion here: drupal.org/node/632288 – Alfred Armstrong Nov 5 '13 at 15:28
  • I have had great results with Mollom... Are you saying Mollom blocks content as spam, without even presenting a captcha, while it is in fact ham? You may want to contact their help desk to see if they can fix those false positives and help them improve their service. – marcvangend Jul 3 '14 at 19:39
  • Even giving a Captcha for too many ham comments is a big problem for me considering that my website generates huge amounts of traffic and comments. – Esser Jul 3 '14 at 19:55

What I use as pest control against human spammers are the following:

  1. I have a rule that automatically gives a user a "not a spammer" role after he/she has verified the e-mail used to register, has been a member for at least three days, and has posted at least three "ham" post (a post is assumed to be "ham" until proven otherwise).

  2. I use the Flag module to let users flag spam for moderator's attention. I also have a rule that unpublishes a post at the eight spam flag.

  3. Only authenticated users with the "not a spammer" role can post more than two posts per hour, and have more than one link in as post (I use a custom module together with the core Flood module for this).

  4. I blacklist email-adresses of notorious spammers by retaining the user with status "blocked". This means that a user that has spammed blatantly will not be able to re-register with the same e-mail address.

  5. In addition, I use Anonymous Publishing to control spam from anonymous humans. It has its own built-in flood control and blacklist system.

Disclosure: I am a co-maintainer of Anonymous Publishing.

  • Thanks for the beautiful clear answer. Points 1 and three are great points which I will incorporate on my website. Number 2 is not relevant for me being that I review every comment manually anyway. My problem was just that too much span got past the honeypot. – Esser Jul 3 '14 at 20:03
  • I have tried Honeypot and Captua modules, but was still getting 10 spams a day, then installed Mother May I module which provides a secret word field on User Registration, and suddenly the spam stopped, now spam free. – CardiffSteve Feb 23 '16 at 16:12

From my pesonal experience I can recommend you:

General protection

Anonymous comments protection

  • listed above captchas (but that will disable caching on pages with comments)


That will stop at least 99% of spam.

  • Yeah I got that Riddle Captha set in registration form with one question and answer is not given, but bots still bypass. Maybe its human-spammers, not bots? I just set up AntiSpam with free Akismet service plan, Mollom with Spamicide, HoneyPot and Captha Riddler and all in one registration form. And if spammers will still bypass I will kill myself. – user13176 Apr 3 '13 at 12:26
  • @user13176 I noticed that bots could bypass too simple questions, like "Type in result of 2 plus 2". But if even reCAPTCHA didn't help, that MUST be human-spammers. And don't forget to protect password reminder form, because bots will trying reset password after failed e-mail activation. – user11153 Apr 3 '13 at 12:41

We do OK with anti-spam and akismet.


In addition to Mollom I use Spamicide seems to have done the trick because we no longer get that issues. It also may be that anytime I saw a spam user created, I used Mollom to block the IP.

Hope that helps. And best of luck.


I've had better success with a combination of http:bl and Botcha than either Mollom or reCAPTCHA.


If you need regexp check out Simple Regex Filter


I use honeypot and mollom. The trick is to create a rules that banned the IP when it failed on honeypot.

  • 2
    Could you elaborate on that trick of yours? – Mołot Aug 25 '15 at 11:13

Did you try https://www.drupal.org/project/cleantalk ? One from the best anti spam

Not the answer you're looking for? Browse other questions tagged or ask your own question.