To be fair, yeah, I’ve seen that too. Usually comes in ugly little waves, not constant. On a couple WP sites it was the dumb combo of open registrations + some half-broken anti-spam plugin doing basically nothing. One site kept getting hit through the login/register stuff even after I cleaned the comments, so it wasn’t just “random junk,” it was clearly a bot loop. I’d check whether anything changed recently — plugin update, form plugin, membership stuff, even a theme update if it touches forms. Also worth looking at whether the spam is all from the same IP ranges / countries or just sprayed everywhere. If it’s the same pattern, it’s usually a bot swarm and not some mystery. Annoying part is you fix it and they come right back the next day like they paid rent.
ToolDecision
Tools, compared and explained
ToolDecision
Tools, compared and explained