Possible hack/injection attempt

[GoPure Kratom]

Hi all,

I started getting a bombardment notifications of emails failing to be sent.
Started looking at it, and after an account creation and few other emails, the password recovyer page started getting hammered like crazy.
 

There was about 350 to the recover password functionality based on the emails.
I shutdown the SMTP to stop the emails being sent at least and I deleted the account.

Also, our chat widget started getting messages with the attacker trying to use this URL:
https://domain/category/product-page/[object HTMLInputElement]?body=555&email=sample%40email.tst&name=fnfOzvSR&orderIdentifier=20

Does anyone know what they were trying to achieve?

There are also several warnings like following in the web server error log:

 

Any recommendations what should be the next steps?

[musicmaster]

There are several Captcha modules (some free). Implement one.

[GoPure Kratom]

Yes I am acutally looking into it right now. Already have one in the contact us page. 

just din't even think fo this route.

Iw as just interested in what this intruder was actually trying to do

[El Patron]

we have the only cybersecurity module for PrestaShop

it alerts you when files have been added/changed/deleted on shop

with restore/commit feature

I wrote this 10 years or so ago when our company ps shop got hacked....loool

https://www.addons.prestaheroes.com/products/prestavault-malware-trojan-virus-protection?variant=40653346603215