BotStop by hCaptcha (enterprise). AFAIK there's also a Google reCaptcha frontend that doesn't require JS. Neither companies offer those solutions because of privacy or security benefits, but to support old IE versions of course.
Cool, I didn't know about this! Too bad there doesn't seem to be a strong open source option, but I'll check this out.