Possible hack or server misconfiguration?

antigeek 05 Mar, 2013
Hi

Firstly Great component, very flexible and easy to use!

I have recently just moved two sites to a new host both of which were functioning fine however shortly after the move we started getting strange form submissions.

The odd thing is its actually sending the forms email template including the form fields

here is a copy of what comes through

From: admin [mailto:admin@admin.com]
Sent: Monday, 4 March 2013 10:59 PM
To: ------------------>removed
Subject: Hallmark Hire Cars website enquiry

Name {Name}
Email {Email}
Phone {Phone}
Subject {Subject}

Message {Message}


Submitted by 173.199.114.147

They always come from [email]admin@admin.com[/email] so I was wondering if that is a default somewhere?
the domain is hallmarkhirecars .com.au it seems to be sending the contact page form.
The IP's are always either 173.199.116.211 or the above

Just wondering if this is a possible hack attempt or something and what I should do if it is, although it does seem a coincidence its happening once I moved to the new host

Anything I should be looking for?

Regards
GreyHead 05 Mar, 2013
HI antigeek,

These are from harmless but annoying web-crawlers :-(

Please see this post which is about the same URL. This is the third time they have come up this week :-(

Bob
SPABO 05 Mar, 2013
Maybee to add a security question in the form?
antigeek 06 Mar, 2013
Thanks for that grey head!
I have added the lines to my robots.txt hopefully that fixes the problem

Cheers!
This topic is locked and no more replies can be posted.