ahrm2

Hey @prashantrai Problem is solved! No more spam! I looked one more time really detailed into the server logs and realized the contact form entries aren’t coming from the website i suspected. They were coming from a very similar domain name that we registered later and cloned to look exactly like the one i linked here. The notification text for incoming conact form entries was apparently not changed back then. Now that CAPTCHA is turned on for both of the websites the spam stopped.

Problem is solved! No more spam! I looked one more time really detailed into the server logs and realized the contact form entries aren’t coming from the website i suspected. They were coming from a similar domain name that we registered later and cloned to look exactly like the one i linked here. The notification text for incoming conact form entries was apparently not changed back then.

May I ask 1 more thing? ??

I have currently removed all the contact forms from my website or at least the elementor elements from the page. The WP contact forms still exist in my WPForms plugin, because I intend on using them in the future again as this is just a temporary solution. However I still get spam? Do I need to delete the contact forms completely from the plugin too in order to deactivate them? I have deleted my website cache in advance.

Thank you for your time!

Hi @prashantrai,

Thank you for the fast reply – I will try these out in the next few weeks.

In the meantime the spambot has “infected” another project I’m working on (not WordPress and not WPForms related, but using the same webhost) however I managed to identify the IP of the spammer there and blocked it by changing the htaccess file – I think the problem is resolved for now.

I hope this helps somebody else struggling with my issue ??

Hello all, I am hopping in on the topic to ask for advice with the same issue. I’ve tried using reCaptcha v2 and incresing the Security Slider preference to maximum, as well as v3 but it didn’t help. I also decided to try my luck in registering the bot’s name (so far always been the same name but different e-mails) as a profanity by following the WPForms tutorial “How to Block Form Submissions Containing Profanity” and creating an extra plugin with the php code to block it. It worked succesfully for me because when i tried putting the bot name that i usually receive couple hundred times a day, the form blocked me for profanity. I thought I’ve succeeded but on the next day i got spammed again. So the bot has somehow discovered a way to block my profanity filter AND the Captcha Settings… I’d be very grateful for any help and tips!

Thanks in advance!