I am working on a situation where there are multiple external Forms being attacked by bots. We are seeing that the bots are accessing these forms and submitting them. Even though recaptcha and honey pot is enabled these bots are able to get around this. At this point we are blocking the IP addresses manually as they come in. The problem is that blocking the IP will work for a day or two and then the same requests keep coming in. I looked up these IP addresses in the logs and found that they are not the normal bingbot or googlebot. These bots are coming from the same city as the client is located. Has anyone had experience with bots acessing there external Forms? What security measures have you been able to activate that stopped these bots?
Thank You,