I have a new client that is hosted on a small hosting company running joomla.
The site had a lot of problems such as contact forms not even working. That is all fixed now and we are trying to get legit traffic.
However, every other day or so we get the same pattern of form spam
- about 5 forms within 1 minute (the same form)
- name, email and phone are obvious fakes.
- The IP address for each batch is the same but it differs from batch to batch.
- the message follows the form of [normal text such as "I came here to work" and then drug names are thrown in. - There are about 60 words or so in the comment.
It's almost certainly some type of hacking attack. However, I haven't seen a pattern like this before.
I did a thorough scrub of the site and as far as I can tell, it is clean..
I was just wondering if anyone else has seen this type of attack.