The other day we had some strange activity on a C5 website. Over a 45 minute period, roughly 40 emails were received notifying us that a form on our website had been filled out.

---------------------
The logs confirm this:
**EMAILS ARE ENABLED. THIS EMAIL WAS SENT TO mail()**
Template Used: block_form_submission
To: info@Doorstepprep.com
From: concrete5-noreply@doorstepprep.com
Subject: Home Form Submission
Body:
There has been a submission of the form Home through your concrete5 website.

To view all of this form's submissions, visithttp://www.doorstepprep.com/index.php/dashboard/reports/forms/?qsid...
---------------------

The strange part is that the "Home" form doesn't exist. Looking at the form submissions for the 2 forms that do exist don't show any new form submissions.

So I'm kind of stumped as to what is happening. The only thing that we can think of is that a PCI scan was scheduled for the same night.

Any thoughts on what happened? How can I track down this phantom form?

Thanks.