Got it. So bots are submitting form data to the handler even though the field does not exist on the form.
Did you remove the field using a filter? Like so:
You could look for the HTTP Post/Get commands that don't come from your webserver and then redirect them though I haven't thought through how best to execute this without breaking your upgrade path.