@stoickp what i dont get is why buzz lightyear is using bbbbbbb and the same email domain abbuzz everytime which would show up so easily in plain sight to anybody that it’s trying to hack – call yourself “samantha jones” or something and most people won’t notice it right away. Either he is being sloppy or he wants you to notice the fake orders for as part of his plan. Is it possible he wants you to delete the orders or user accounts or do something with them upon awareness? either that or he is just a sloppy hacker. I mean what hacker would alert the user of their own malicious activity?
I searched my logs too and confirm the same activities as @davetgreen . fortunately they all returned error codes 401 400 etc.
Does anyone enablebot protection in cloudways and did it still get through?