i was poking around the server logs late last night and noticed some really sketchy login floods coming in nonstop. it looked like a bot army banging on the ssh gate hoping id slip up. is anyone else seeing these creepy automated hits pop up outta nowhere?

something aint right

Weird trafic happening

Checked the server logs this morning and saw a flood of failed login attempts from a single source. Feels like someone is siting there with a bot net tryna brute force its way in. My coffee spilled when i saw that many auth failures on the dashboard. Time to rotate all passwrods crank up the firewall rules and maybe drop those unneeded s3 buckets. Cant shake the feeling we might have just missed a worm burrowing in so im stayin glued to the monitors.

Looks like somebody spent half the night poking around my admin page tripped all the alerts but still couldnt crack a single password so nice try pal

Seems someone’s been poking around my server logs non stop scanning ports like a nosy neighbor. Cant tell if its just a bored bot or some sneaky skript kiddie trying to backdoor my setup. If it keeps acting weird ill just add it to the blacklist and focus on stuff that matters.

I been seein strange login attemps coming in all night long. They hammer the admin page so fast i can almost feel my cpu going to die. I blocked a handful of CIDR blocks but they just shift servers and keep comin back. Feels like some low level hacker gremlin pokin holes in the net looking for a way in. Is anyone else gettin these random flood of userdata probes in your logs

FOR YOUR INFORMATIONS and ACTIONS against these Basterds HACKERS USING your servers IP and accounts and mails boxes ! RECEPTION 3 ème mails escrocs usurpant la SECURITE SOCIALE sur les Boites emails à LAPOSTE.net : Bonjour Webmasters de SIGNAL SPAM, de AMELI.fr, de la CPAM, et LA POSTE.net, Et ces escroqueries continuent encore en Juin 2025, et ceci depuis au moins +18 années (emails tous archivés complets avec tous leurs codes HTML depuis 2007 ) ! Mardi 10 Juin 2025 après 07h01 (toujours envoyés les nuits, ou tôt les matinées, les week-ends, ou avant les ouvertures ou après le fermetures des Bureaux et Administrations en France )( méthodes d’escrocs et de faux culs ) j'ai reçu sur ma boite email ce 3ème mails ci-dessous d’escroquerie usurpant la CPAM et venant cette fois-ci de l'adresse email d’escroquerie: no-replyxx7_v@seosoecnrns.com gérée par abuse@lws.fr L’adresse IP utilisée par le PC de ces batards de hackers fous est : 40.107.161.111 gérée par abuse@microsoft.com Received : from PR0P264CU014.outbound.protection.outlook.com (mail-francecentralazon11022111.outbound.protection.outlook.com [40.107.161.111]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mlpnf0117.laposte.net (SMTP Server) with ESMTPS id 4bGc8T338YzDq6y IP Lookup Details: IP Information - 40.107.161.111 Host name: mail-francecentralazon11022111.outbound.protection.outlook.com Country: United States Country Code: US Region: City: Latitude: 37.751 Longitude: -97.822 Utilisant encore les adresses IP et adresses emails de la Société MICROSOFT C'est clairement une tentative d’escroquerie usurpant la CPAM et AMELI.fr ( bourré de fautes ) ! Ci-dessous cet email d’escroquerie avec ces en-têtes complets : *********************** Contenu du mail des hackers fous *********************** Votre CPAM vous Ecrit • Aujourd'hui, à 07:01 (il y a 5 heures) 28Ko • • • NR De : Né_Pas Répondre • A : Moi • Une information importante vous attend Une notification est disponible dans la section notifications de votre compte. Connectez-vous vite pour prendre connaissance de ce message :

Ive been peeking at the backend logs and theres this weird traffic banging on our login portal nonstop. Not sure what script is behind it but none of those headers make any sense. Im holding off on blocking outright until it tries somethin more blatant.

Smells like a ghost crash landed in my request logs tonight. There are these endless hits from some phony user agent string messing around. I swear it doenst even follow the normal header rules and is poking at all the default endpoints . Cant have that sneaky crawler wrecking my setup gotta slam the door shut.

I keep seein weird login alerts that aint from me and its creepin me out. Its like someone openin my mailbox behind my back and deletin some notes too. I peeked at the email headers but brains dont work like they used to so im just sittin here wonderin whats goin on. If this keeps up i might have to dump this whole account.

i aint no expert but when i saw that weird popup on mine screen i felt like some stranger was peekin at my emails

Not sure whos been banging on my ssh port but its been trying nonstop since last night. My logfile is full of failed login attempts and somethings just off about it

Been staring at my auth logs all morning cause someone is hammering our ssh with bad creds. Theyre bouncing from user to user like theyre hunting for an open door. Honestly it messed up my coffee break checking if my block rules stuck. Im setting up a small trap system to see what theyll try next. Bet they get bored when theres nothing left to exploit.

ive been staring at the server logs today and noticed an avalanche of weird POST requests hammering our login page. somethings telling me this is more than a random probe its a bot hunting for weak entry points. my logs screamed 403 over and over like a broken record. if u spot similar failures on ur end u should prob tweak your firewall settings ASAP. letting these scanners roam free is like leaving the door unlocked in a sketchy neighborhood.

sketchy traffix

Looks like someone tried to jackhammer our login page at 3am and it wasnt no authorized job. Gonna bolt on some extra blocks before that thing punches through our firewall like concrete.

Server logs lit up last night with a stranger trying to pick my digital lock feels like some barefoot bandit roaming thru my backyard. I better set up some trip wire traps before these ghost clickers slip in for good.

Suspicious trafic

Been tailing the server logs for hours and something aint right with that lone caller digging into config files. Looks like some botnet drone or maybe just a clueless script kiddie tripping over the login page. Not sure if its a harmless probe or a prelude to a full scale meltdown. Gonna lock it down before it wakes the whole neighborhood.

I was combing thru my server logs when i saw some weird repeated logins from that spot in the middle of the night. They tried to sneak into my dashboard and even changed the email headers on outgoing mails. Feels like someone is just messing with me but also maybe trying to jack somethin. Ive never seen traffic bounce around so many proxies before. Stay vigilant folks something aint right here.

Been seeing weird hits popping up all night from some unknown source hitting my dashboard and it aint a crawler i know. Tried tossing it into the blocklist but it just keeps comin back every few minutes like some pesky gnat. Anyone else see this odd activity lately cause im startin to think im hosting a ghost in the machine.

Weirdoooo

sneaky trafic

this shit sketchy