@prokilogrammer thanks for pointing that out. Probably some spammer brute forced/pished it. I sent a ticket to @LiquidWeb asking wtf happend