Email Spam!

[CPWerks]

I've been getting 100's of these emails throughout the last 24 hours and I have no clue what to do! I completely disabled the contact us option from my forum, I even banned the IP associated with this emails from the site yet I still keep getting these random emails. Does anyone have any other suggestions?

The following message was sent to you via the XXX Contact Us form by ouiqfeyv ( mailto:sample@email.tst ).

--------------------------------

20

--------------------------------

Referring Page:
IP Address: 114.77.63.103
User Name: Unregistered
User ID: 0
Email: sample@email.tst

The following message was sent to you via the XXXX Contact Us form by irskpjiw ( mailto:sample@email.tst ).

--------------------------------

20" or (sleep(4)+1) limit 1 --



--------------------------------

Referring Page:
IP Address: 114.77.63.103
User Name: Unregistered
User ID: 0
Email: sample@email.tst

Thanks guys.

[Bluemax712]

Maybe they are faking your Contact Us form and connecting directly to your Email Server port 25 to deliver the message - that way a normal .htaccess block on the Web Server page wouldn't help.

Can you contact your Web Host to try and block the IP from entire server?

[CPWerks]

It's possible. I did contact them and they did ban the IP a few hours ago but I am getting email still as I type this. This is driving me crazy! =/

[Bluemax712]

You can try changing the Contact Us email to something different - like a temp email account
to see if the messages show up there - at least you will know if they are using the form or not.

Also - do you know how to read all the email headers? ( it's usually not shown in most email clients by default)
-to verify where the message came from

[CPWerks]

Hmm, okay let me try that. By the way, had 1200 emails Queued, disabled the flood check and increased the number of emails per batch to 500. Queued emails are down to 0 and Im still getting emails. Though they're from about 30 minutes ago. Let's see if they stop now that nothing is in the queue.

[Bluemax712]

1200! - they sound pretty desperate to contact you
maybe it's an important sale on Nike Shoes or Ipads
you don't want to miss out

[CPWerks]

LOL tell me about it.

[ForceHSS]

Don't let guests use the contact us