Title: Bots attack
Last modified: August 30, 2016

---

# Bots attack

 *  [pacovitiello](https://wordpress.org/support/users/pacovitiello/)
 * (@pacovitiello)
 * [10 years, 10 months ago](https://wordpress.org/support/topic/bots-attack/)
 * Today I’ve received more than 1300 emails in 10 minutes from [sample@email.tst](https://wordpress.org/support/topic/bots-attack/sample@email.tst?output_format=md),
   trying to inject some javascript on my website. Then I found out that CPU usage
   on my VPS grew to 700%, so I had to deactivate CF7 and restart my server.
 * Any chance to fix that?
 * [https://wordpress.org/plugins/contact-form-7/](https://wordpress.org/plugins/contact-form-7/)

Viewing 3 replies - 1 through 3 (of 3 total)

 *  [Neil Murray](https://wordpress.org/support/users/buzztone/)
 * (@buzztone)
 * [10 years, 10 months ago](https://wordpress.org/support/topic/bots-attack/#post-6398447)
 * Form spam is an unfortunate fact of life for most nowadays.
    ​ ​Many people use
   some form of **Captcha** to limit this & there are a host plugins available to
   do this – see [https://wordpress.org/plugins/​search.php?​q=captcha](https://wordpress.org/plugins/search.php?q=captcha)
 * ​​A more modern approach is to use a **Honeypot** method which tends to very 
   effective against Bots. Again there are a host plugins available to do this –
   see [https://wordpress.org/plugins/search.php?q=honeypot](https://wordpress.org/plugins/search.php?q=honeypot)
 *  Plugin Author [Takayuki Miyoshi](https://wordpress.org/support/users/takayukister/)
 * (@takayukister)
 * [10 years, 10 months ago](https://wordpress.org/support/topic/bots-attack/#post-6398460)
 * If you know the sender email address, why not simply use [Comment Blacklist](http://contactform7.com/comment-blacklist/)?
 * CAPTCHA also consumes CPU much. Honeypot might work but only 50/50 possibility.
 * But the best way to block them is [detecting the source IP address](http://contactform7.com/special-mail-tags/)
   and blocking accesses from the address with firewall. Ask your host support if
   you can use firewall on the host.
 *  Thread Starter [pacovitiello](https://wordpress.org/support/users/pacovitiello/)
 * (@pacovitiello)
 * [10 years, 10 months ago](https://wordpress.org/support/topic/bots-attack/#post-6398471)
 * How can I find out that email IP address? I inspected headers but I was unable
   to do that.

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘Bots attack’ is closed to new replies.

 * ![](https://ps.w.org/contact-form-7/assets/icon.svg?rev=2339255)
 * [Contact Form 7](https://wordpress.org/plugins/contact-form-7/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/contact-form-7/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/contact-form-7/)
 * [Active Topics](https://wordpress.org/support/plugin/contact-form-7/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/contact-form-7/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/contact-form-7/reviews/)

## Tags

 * [bots](https://wordpress.org/support/topic-tag/bots/)

 * 3 replies
 * 3 participants
 * Last reply from: [pacovitiello](https://wordpress.org/support/users/pacovitiello/)
 * Last activity: [10 years, 10 months ago](https://wordpress.org/support/topic/bots-attack/#post-6398471)
 * Status: not resolved