While I agree that you must have a security plugin on your site, this is most likely an unsuccessful probe attempt, and not an actual hack.
POST TITLE - THE SITE NAME is most likely associated with a script that tried to automatically capture information about your message and instead found that it could not find this information because it did not return your actual name / site name
The 3 underscores are used by some themes as a formatting tool so that the text displays as Bold and Italic, so if this probe worked, you would see 123 . In short, it looks weird because what they tried to do failed, if it worked, you would see something like " 123 My cool post - mySite.com 123 "
Nosajimiki
source share