Report this

What is the reason for this report?

My website hacked

Posted on December 28, 2020
Anwaru 123

By Anwaru 123

Anwarul

I am using ubuntu 16.xx with vesta cp

Yesterday someone hack my wordpress site and change url in database also all image description column, all contact column he set a ads link java script in hole database. yesterday i recover my site now today he have done same thing again. i think he attacking from mysql side.



This textbox defaults to using Markdown to format your answer.

You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

Hi there @anwarul123,

I would recommend making sure that you change your MySQL password in this case and also make sure that port 3306 is closed for the outside world.

Also if you are using a CMS like WordPress or Joomla, make sure to update all of its plugins and themes to include the latest security patches.

If you are using WordPress specifically make sure to follow the steps from this answer here on how to secure it:

https://www.digitalocean.com/community/questions/how-to-secure-wordpress-without-a-security-plugin

Another thing that I could suggest is checking your access logs for any suspicious POST requests which could have been used to exploit your website.

Let me know how it goes. Regards, Bobby

Hi there,

You can install malware detection software like Linux Malware Detect, also known as Maldet or LMD. It will help you to locate any malicious files on your droplet.

If you’re interested in securing your droplet (everyone should be in general) you can double-check our tutorial - An Introduction to Securing your Linux VPS.

The article will cover the basic and some more advanced steps in website and server security.

You can check the article here:

https://www.digitalocean.com/community/tutorials/an-introduction-to-securing-your-linux-vps

Hope that this helps!

The developer cloud

Scale up as you grow — whether you're running one virtual machine or ten thousand.

Get started for free

Sign up and get $200 in credit for your first 60 days with DigitalOcean.*

*This promotional offer applies to new accounts only.