Support » Plugin: SI CAPTCHA Anti-Spam » CAPTCHA compromised – robots filling forms

  • Resolved beanthere22

    (@beanthere22)


    I have several sites running FS contact forms with si captcha. All of those forms are being hit by spammers coming through the form. I have set up all the security stuff I can find in the form and captcha, including the honeypot, but these are still coming in. The volume suggests that a robot is creating them and is bypassing si captcha.

    All of the spam emails match the form fields, and the form fields are different site to site. Most of the stuff is trapped by my spam folder, but not all.

    I am not getting these spams from sites with Gravity or Contact 7 forms.

    Here is a header from one of those emails:

    Return-Path: <admin_dmrctr_121@[redacted]>
    X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
    	hbz8-dl5z.accessdomain.com
    X-Spam-Level: 
    X-Spam-Status: No, score=-1.9 required=7.0 tests=BAYES_00,
    	FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM,HEADER_FROM_DIFFERENT_DOMAINS,
    	HK_RANDOM_ENVFROM,NO_RELAYS,URIBL_BLOCKED autolearn=no autolearn_force=no
    	version=3.4.0
    X-Original-To: sam@[redacted]
    Delivered-To: sam@[redacted]
    Received: by hbz8-dl5z.accessdomain.com (Postfix, from userid 30)
    	id 396AD1981; Wed, 11 Jan 2017 07:37:39 -0500 (EST)
    X-Original-To: info@in-ajsop.org
    Delivered-To: info@in-ajsop.org
    Received: by hbz8-dl5z.accessdomain.com (Postfix, from userid 10016)
    	id 7BADD167D; Wed, 11 Jan 2017 07:37:30 -0500 (EST)
    To: info@[redacted]
    Subject: Feilun FT009 RC Boat Parts Motor with Water Cooling System FT009-8
    X-PHP-Originating-Script: 10016:class-phpmailer.php
    Date: Wed, 11 Jan 2017 12:37:30 +0000
    From: RobertLoR RobertLoR <[redacted]@mail.ru>
    Reply-To: roberttap@mail.ru
    Message-ID: <b53123a9cefe7c306db59ae10484d043[redacted]>
    X-Mailer: PHPMailer 5.2.14 (https://github.com/PHPMailer/PHPMailer)
    MIME-Version: 1.0
    Content-Type: text/plain; charset=UTF-8
    Content-Transfer-Encoding: 8bit
    • This topic was modified 2 years, 10 months ago by Steve Stern.
    • This topic was modified 2 years, 10 months ago by Steve Stern. Reason: much cleanup
Viewing 3 replies - 1 through 3 (of 3 total)
Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘CAPTCHA compromised – robots filling forms’ is closed to new replies.