How do I protect WordPress from spam comments?

To protect WordPress from spam comments, follow these steps:

Install Plugins: Use http://wordpress.org/plugins/anti-spam/ or https://wordpress.org/plugins/wps-hide-login/ to change the login URL.
Add reCaptcha: Enable reCaptcha on forms and contact pages.
Restrict Login: Add to .htaccess:
```
Require ip x.x.x.x
```
, replacing x.x.x.x with your IP (http://www.whatismyip.com/).
Monitor Logs: Enable logs (https://uk.cloudlogin.co/statistics/logs/) and block abusive IPs via Advanced > IP Blocking (https://uk.cloudlogin.co/advanced/ip-blocking/).