Ok I'm not sure if I'm stressing over nothing here,
I'm still in the process of setting up my whmcs site and so I dont have any services or products avaialibe just yet. However, I received my first signup yesterday. At first I thought it was just a keen customers, so I emailed them to say we're not quite ready yet. Then a few hours later I got another user registration. I'm now certain these are bots. Whatsmore, the passwords they both used to register are exactly the same.
But whats scary is that a section of the password they used contains some of my original password (for my whmcs site). I've since changed all my passwords, but its still very worrying.
Was my password compromised? If so how?
Under the clients profile > log, I see this:
Customer successfully registered with random generated password at (mysite) (myresellerclubid) - User: kamowitzangel-at-yahoo-dot-com - User ID: 1
It states clearly that the password was randomly generated? Can someone please help this noob figure out whats going on?
Cheers