# Strange behavior in our mautic system creates anynomous contacts

**URL:** <https://forum.mautic.org/t/strange-behavior-in-our-mautic-system-creates-anynomous-contacts/30488>\
**Category:** Product Support\
**Created:** [January 14, 2024, 5:22pm UTC](https://forum.mautic.org/t/strange-behavior-in-our-mautic-system-creates-anynomous-contacts/30488 "2024-01-14T17:22:30Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![media31](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/media31/32/679_2.png) [@media31](https://forum.mautic.org/u/media31)\
**Post date:** [January 14, 2024, 5:22pm UTC](https://forum.mautic.org/t/strange-behavior-in-our-mautic-system-creates-anynomous-contacts/30488/1 "2024-01-14T17:22:30Z")

</div>

Mautic version is: 4.4.3

Hello, our Mautic system has been operating for about 2 years at [https://mailer.xyz.de](https://mailer.xyz.de). However, we have noticed an issue over the last 90 days that we cannot explain. Whenever something is appended to our mautic web address, for example, ‘[https://mailer.xyz.de/einfachso](https://mailer.xyz.de/einfachso)’, and this page is then accessed, Mautic automatically creates an anonymous contact.

As a result, nearly 20,000 anonymous contacts have been generated in the past few months. We do not understand how these links are being created, but we suspect that some crawlers or bots might be generating and then ‘visiting’ them? Additionally, we have not made any fundamental changes to the system and are puzzled as to why this is suddenly happening. What could be causing this ‘error’?

---

<div class="post-metadata">

**Author:** ![mzagmajster](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/mzagmajster/32/687_2.png) [@mzagmajster](https://forum.mautic.org/u/mzagmajster)\
**Post date:** [January 14, 2024, 5:29pm UTC](https://forum.mautic.org/t/strange-behavior-in-our-mautic-system-creates-anynomous-contacts/30488/2 "2024-01-14T17:29:52Z")

</div>

Basically when someone visits the page and that page has mautic tracking script on it, Mautic will create anonymous contact, when that contact fills out the form or somehow identifies itself that anonymous contact becomes a known lead.

Theory about the bots is quite possible. On mautic side I suggest you cleanup anonymous contact older then X number of days (there is a command that is provided by mautic core).

---

<div class="post-metadata">

**Author:** ![media31](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/media31/32/679_2.png) [@media31](https://forum.mautic.org/u/media31)\
**Post date:** [January 14, 2024, 5:36pm UTC](https://forum.mautic.org/t/strange-behavior-in-our-mautic-system-creates-anynomous-contacts/30488/3 "2024-01-14T17:36:07Z")

</div>

The URLs all lead to 404 so no one can fill out any form using that exact address.

Most contacts are created by trying to access existing files for example in

[https://mailer.xyz.de/themes/](https://mailer.xyz.de/themes/)  
[https://mailer.xyz.de/assets/](https://mailer.xyz.de/assets/)

that are NOT accessable from the outside.

---

<div class="post-metadata">

**Author:** ![mzagmajster](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/mzagmajster/32/687_2.png) [@mzagmajster](https://forum.mautic.org/u/mzagmajster)\
**Post date:** [January 14, 2024, 6:55pm UTC](https://forum.mautic.org/t/strange-behavior-in-our-mautic-system-creates-anynomous-contacts/30488/4 "2024-01-14T18:55:34Z")

</div>

The links you are posting do not work.

Anyway, if tracking script is somehow triggered, then its normal that anonymous contact gets created.

If we would have the real links here I might be able to provide more insight.

---

<div class="post-metadata">

**Author:** ![media31](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/media31/32/679_2.png) [@media31](https://forum.mautic.org/u/media31)\
**Post date:** [January 15, 2024, 7:34am UTC](https://forum.mautic.org/t/strange-behavior-in-our-mautic-system-creates-anynomous-contacts/30488/5 "2024-01-15T07:34:19Z")

</div>

I don’t know if the orginal links will help but here is one example:

 ![kontakt](https://us1.discourse-cdn.com/flex020/uploads/mautic/original/2X/8/8742501d8e05c7eb5e757f8f7971e7dde6ef1fac.gif)

Yesterday evening, many contacts were created without visited any link. Their contact history is completely empty, except for the entry that the contact was created.

 ![kontak2](https://us1.discourse-cdn.com/flex020/uploads/mautic/original/2X/8/85ee07b97a28eb6ceb7e25fb97f063e165a96abb.gif)

---

<div class="post-metadata">

**Author:** ![mzagmajster](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/mzagmajster/32/687_2.png) [@mzagmajster](https://forum.mautic.org/u/mzagmajster)\
**Post date:** [January 15, 2024, 9:21am UTC](https://forum.mautic.org/t/strange-behavior-in-our-mautic-system-creates-anynomous-contacts/30488/6 "2024-01-15T09:21:47Z")

</div>

I just tested it myself, mautic also tracks hits on application itself, if you are not logged in.

I would check the logs see what user agents are doing those hits and try to block them on web server level.
