Submitted empty CF7

I have Akismet Anti-Spam that is automatically managed for me via WordPress.
Would you recommend me more effective?

bots are bypassing?Akismet? ??

In the past i’ve used some plugins but none really effective (for this i’ve created mine).

If I personally had to choose I think I would choose this “WordPress Zero Spam”, never tried, but it but it seems promising to me and it can work in your case (essentially you need to trick bots with js, would be much more detectable).

Dear Erik,
I installed “WordPress Zero Spam”, changed CF7 (deleted some non-informative rows) but spam continues to arrive. What else I can do?

if you know that the spam is always coming from the same ip, have you tried to block it with the zero spam functions? i think you should have one for that!

you can also try with a honeypot field, you have to install a plugin for that.

I’ve checked the ip address you sent in the past but it seems more likely your ip than the attacker’s ip. Use this website to get information about the attacker

91.243.100.70 – not my IP address.
Thank you very much for website. We found hacker’s name and address. There is another region. Russia is huge country and it is located more than 2000 km away.
Thank again!

it could also be someone who has taken possession of that server, without it necessarily being the ip of the hacker. But if the attack comes only from that ip you can simply blacklist it to solve!

My advice is to ban it with htaccess. google for that, is the safest way

Dear Erik,
Thank you for your advice but I have not enough experience to fight against hackers.
Could you give me step by step instruction how to ban this IP 91.243.100.70?

Is it possible to check fiction emails by submitting CF7?
Hacker above always create different emails for submissions and I think these are non-existed emails. Maybe just stop fiction emails instead ban ID?

you can ban the ip directly, check this https://contactform7.com/comment-blacklist/
cf7 has a feature for this!

in addition you can use htaccess to deny that ip access to your website (recommended).

you can’t check if the mail exists because you have to send them an email and wait the response. Good idea anyway, I’ll think about it if it’s possible somehow!

Dear Erik,
I can not believe that attacks have stopped after including into blacklist.
Wordpress answered me that they have not structure to use htaccess.
Thank you very much!

it’s a pleasure! i’m glad you solved it! ??