Hi James, thanks for your reply!
I am sure that i didn’t integrated Akismet with Contact Form 7, because I did not know that integration at all.
In the old days, I did not see these spam messages in Akisment dashboard. In addition, if they sent out the spam emails from Contact Form 7, why the email body is not formatted as I defined in the Contact Form 7?
I am quite curious how did they achieve that (bypass reCapcha, not from comment, and send spam emails via wordpress system), so I can defend. Thanks!