Can spam robots access the confirmation page directly?

Hi. Some time, I receive the following notification email from my site’s contact form.

===========================
Company name: [company_name]
Name: [your_name]
Phone number: [your_phone]
Email address: [your_email]
===========================

The tag is displayed as it is.

Normally, even if the input field is blank, it will not be displayed like this.

Why do I get an email with this display? Is it spam?

What should I do?

I’m sorry I’m not good at english.
Thank you.