Apparent Hack

Discussion in 'Installation/Configuration' started by dayjahone, May 17, 2016.

  1. dayjahone

    dayjahone Member

    It looks like a website on my server got hacked. The website is running Wordpress. I can delete the whole site, but I was hoping to figure out the problem. This is what I see when I run "top":
    Screen Shot 2016-05-17 at 7.42.01 AM.png
  2. chaosad

    chaosad New Member

    take a look at the logfiles of web48
  3. PepinCZ

    PepinCZ New Member

    What you mean by "got hacked"? If somebody has your Wordpress password, then change it.
  4. Ilko

    Ilko New Member

    All I see from this top result is that web48 user is spawning a lot of processess. This does not mean the website is hacked it could be legit visitors, or bots trying to brute force the website. In both cases you can determine that in the logs, either access logs, or install some visitors tracking plug-in for wordpress and Wordfence Security plugin or similar to block the unwanted traffic.

Share This Page