100+ password reset emails this morning from invalid email & they keep coming

[Nstarleather]

HI Folks I woke up this morning do 100+ “your email could not be delivered” messages from my site. A specific email address just keeps sending out the “password reset” form: [email protected]

I'm not sure how to block them. I tried deleting them as a customer but even that comes back with a error,
though I doubt deleting the customer would have worked anyway.
Here's the message when I went to delete the customer:




Miva Merchant returned an invalid response


Function: CustomerList_Delete
Status: 200
Response: Runtime error in mm5/5.00/modules/fulfill/couponrd.mvc @ [0000006f:0000009c]: couponrd.mv: Line 11009: MvQUERY: mysql_stmt_prepare: Table 'nstarleather_mmdb.s01_CouponPoints' doesn't exist
{
"success": 1,
"processed": 1
}

I'm concerned that this is someone trying to access the site. Even if they're not deleting hundreds of these is annoying.

Can you please let me know what to do?

[ILoveHostasaurus]

Unrelated to the overall issue, that error suggests you have a coupon module whose underlying database table is not present, so it may have been an incomplete install or incomplete removal. I'd suggest having our support take a look at that.

The other issue, support may also be able to help with counter measures on form spam, such as the recaptcha v3. I've made a change in Cloudflare that should help immediately for the current abuse.

[Nstarleather]

Thanks so much! Especially for answering on a holiday!