Post

Lesson learned: If you have any kind of public-facing website that can trigger emails (like sign up pages or contact forms), put some kind of protection whether it's a CAPTCHA, WAF, or anything that will protect you from malicious users.