I seen weird login requests pop up in my inbox and it scares me to think whos messin around with my emails. Theyd be better spendin their time goin through the classifieds on paper than tryin to hack a rickety old lady online.

Checked the server logs and saw a single host pounding our login page nonstop until I finally blocked it. Just hope they don’t come back around or I’ll end up on another all nighter babysitting this ghost.

The IP attempted to perform XML Injection attacks on the Apache server.

It made multiple requests with the same X-Requested-With header.

It attempted to delete directories on the FTP server.

Multiple 5xx Server Error Codes: A high count of server error status codes such as '500 Internal Server Error' may suggest an attacker is probing the server's security.

Back in my day the internet was just a twinkle in someones eye so I barely know whats going on. Somethings been poking my front page like a curious racoon rummaging thru the trash. Everytime I try to log in it throws me a string of gobbledegook that makes my head spin. If anyone can tell me what kind of shenanigans that could be I would be mighty grateful.

I just saw a funky alert pop up in my junk mail headers about a stranger poking around my stuff. I couldnt tell what that squiggly jumble meant but it had me real nervous. My windows flashed this huge red type warning but I dont know which button to hit. Hope this ghost in the machine gets booted out soon before it fries my old toy.

I was poking around my email headers this morning and stumbled on a sneaky stranger fiddling with my mail like a raccoon in a birdfeeder. Whoever you are better skedaddle before I have my grandkids trace you down.

FOR YOUR INFORMATIONS and ACTIONS against these Basterds HACKERS USING your servers IP and accounts and mails boxes ! Pour votre Information et Actions contre ces hackers utilisant vos serveurs IP et boites mails ! RECEPTION nouvel email d’escroquerie usurpant l’ETAT Français et la SECURITE SOCIALE sur les Boites emails à LAPOSTE.net : Bonjour Webmasters de SIGNAL SPAM, de AMELI.fr, de la CPAM, et LA POSTE.net, Et ces escroqueries continuent encore en Juin 2025, et ceci depuis au moins +18 années (emails tous archivés complets avec tous leurs codes HTML depuis 2007 ) ! Lundi 10 Juin 2025 après 03h52 (envoyés les nuits, ou tôt les matinées, les week-ends, ou avant les ouvertures ou après le fermetures des Bureaux et Administrations en France )( méthodes d’escrocs et de faux culs ) j'ai reçu sur ma boite email ce nouvel email ci-dessous d’escroquerie usurpant la CPAM et venant cette fois-ci de l'adresse email d’escroquerie : noreply_xxcr@ssoninesnsfr.com gérée par contact@privacyprotect.org L’adresse IP utilisée par le PC de ces batards de hackers fous est : 40.107.161.85 gérée par abuse@microsoft.com Received : from PR0P264CU014.outbound.protection.outlook.com (mail-francecentralazon11022085.outbound.protection.outlook.com [40.107.161.85]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mlpnf0120.laposte.net (SMTP Server) with ESMTPS id 4bFw0B2s5LznTVc IP Lookup Details: IP Information - 40.107.161.85 Host name: mail-francecentralazon11022085.outbound.protection.outlook.com Country: United States Country Code: US Region: City: Latitude: 37.751 Longitude: -97.822 Utilisant encore les adresses IP et adresses emails de la Société MICROSOFT C'est clairement une tentative d’escroquerie usurpant la CPAM et AMELI.fr ( bourré de fautes ) ! Ci-dessous cet email d’escroquerie avec ces en-têtes complets : *********************** contenu du mail des hackers *********************** Votre CPAM vous Ecrit • Aujourd'hui, à 03:52 (il y a 6 heures) 39Ko • • • NR De : Né-Pas Repondre • A : Moi • Une information importante vous attend Une notification est disponible dans la section notifications de votre compte. Connectez-vous vite pour prendre connaissance de ce message : ************************* Codes HTML des hackers ********************* Return-Path : <noreply_xxcr@ssoninesnsfr.com> Received : from mlpnf0120.laposte.net (mlpnf0120.sys.meshcore.net [10.94.128.99]) by mlpnb0108 with LMTPA; Mon, 09 Jun 2025 03:52:10 +0200 X-Cyrus-Session-Id : cyrus-1749433930-19534-1-3634201158307488638 X-Sieve : CMU Sieve 3.0 ARC-Seal : i=2; a=rsa-sha256; d=laposte.net; s=lpn-wlmd; t=1749433930; cv=pass;

Okay this looks fishy from our server logs. I seen over 20 login fails in a two minute window from its address and its location is half way across the world. First i thought maybe a bot messing about but now it smells like someone poking once too often at our firewall. Time to crank up the captchas before things get real messy.

As a knackered old timer I noticed some odd sign ins popping up on my page and its giving me the jibblies. I havent the foggiest why someone keeps messing with my account and it dont feel right. Guess I need to ring up my grandson to sort this hacker malarky out before they nick all my memories.

This IP was implicated in attempts to inject ransomware into our systems.

I was fiddlin with my email headers today and noticed weird traffic comin from a place ive never used before. At first i thought my grandson was messin around but now it feels more like some stranger snoopin in my mail. Why cant they find somethin better to do than poke into an old lady inbox

just skimmed the email headers and it looks like you’ve been secretly handshakeing with some shady servers so you might want to lock down your setup before somethings goes sideways

I was checking the server dashboard today and saw someone tring to brute force our root account and it kinda spooked me

I just spotted a weird flood of login tries in my server logs and it didnt sit right with me. Looks like some script scanning for weak spots so id avoid clicking any links from that unknown source.

ugh noticed some weirdo slippin thru my email headers last night creep in like they own my inbox someone better sho that weasel away pronto

my apache logs are showing a ghost visitor bouncing requests off non existant endpoints. seriously feels like someone tryin to map out my backend.

seems like somethin been hammerin my logs all day pokin at routes i havent even setup. cant wrap my head around why its actin like its got the insiders map. its defintly not a friendly visitor so im slamming the walls shut tonight.

Ive been digging thru my site logs all day and those repeated attempts from some far flung spot are giving me the creeps. Feels like some sneaky crawler is trying its luck where it aint welcome and i aint exactly thrilled about it. Might have to yank the power plug on this thing if it dont knock it off real soon.

So i was skimmin the server logs and saw a random host hammering our SSH like its a pizza order. Kinda sus how it keeps popping up every few hours probing all ports. Guess time to brew extra coffee and tighten them firewall rules asap.

glitchz

woke up to a flood of login failues in the sys log all pointing at this one dodgy host. its like some bot decided to treat my server as a playground. ive never seen my firewall sweating this much. makes me wonder if a new worm is tryna recruit my machine or if its just a bored script kiddie. gonna lock it down stronger then a vault and hope they move on to easier targets

My ancient laptop was rattled by some sneaky spiders poking at its ports all night and I swear it gave me the heebie jeebies