Contact Form Spam
Answered
I have someone calling themselves "Smith" using the contact form (which I believe has reCAPTCHA protection) to send in dozens of leads per day. What's strange is that there's no phone/email (which are required) but there's content in the "Event Notes" field like this:
field_00bdb88: 3
field_f5a9b22: 00:00
field_1a3a4bd: 3
field_e626fcb: 3
field_ef4bb40: 3
What can be done to stop them? I've blacklisted them, but of course that doesn't help the contact form.
The same question You can't vote. Please authorize!
We're taking a look on your behalf.
We're taking a look on your behalf.
So it looks like they were taking advantage of your party planner form. Elementor was registering the submissions as unsuccessful, but the after submit "actions" may have still been letting it through as a lead. I cleaned up the spam leads, traced their IP back to a hosting network (basically there were quite a few IP addresses getting blocked by your wordfence firewall) and so instead of just blocking the one that was sending spam, I blocked that networks entire range of IP addresses.
Let us know if more come in and we'll look into it more at that point.
So it looks like they were taking advantage of your party planner form. Elementor was registering the submissions as unsuccessful, but the after submit "actions" may have still been letting it through as a lead. I cleaned up the spam leads, traced their IP back to a hosting network (basically there were quite a few IP addresses getting blocked by your wordfence firewall) and so instead of just blocking the one that was sending spam, I blocked that networks entire range of IP addresses.
Let us know if more come in and we'll look into it more at that point.
Replies have been locked on this page!