Akismet protects your blog’s commenting section from hyperlink spam and spammy anchor text URLs posted by users as well as spam bots. The plugin also protects your installation from TrackBack and Pingback spam (which is also known as sping).
iThemes Security (formerly known as Better WP Security) plugin allows you to secure your WordPress installation in more than 30 ways. Install the plugin for your blog and once the installation is successful, you will see following Secure your site now button at the top of your dashboard:
Wordfence is a powerful WordPress plugin which protects your website from Distributed Denial of Service (DDoS) attacks, malicious web crawlers and other types of attack techniques commonly used by hackers, script kiddies etc. The plugin can also scan your entire installation in real time for various types of existing as well as new vulnerabilities like Heartbleed etc.
CloudFlare offers a free security plugin for your self-hosted installation of WordPress, which make use of spam database hosted and maintained by Project Honey Pot to protect your blog from hackers, attackers and malicious IP addresses.