This is what I did. Stop Spam Bots
I did it at the server level.
If you don't have your own server, maybe your host would install the php API at least?
It was well worth the effort for us. But it may not be easy to get installed for folks on shared hosting.