Determining Source for File Change

  • I was recently hacked and so rebuilt all my sites and reinstalled Wordfence right away but it took me a day before I paid for the Premium version. When I scanned I found a file had still be modifed in a very old theme which I have no deleted. Is there a way to search in any logs somewhere to determine the source IP which changed that file?

Viewing 1 replies (of 1 total)

  • Since you have deleted the file it’s not going to be easy to tell. Typically you would check the last modified date on the file and then inspect your access, error logs to see if there was any suspicious activity at the time when the file was modified. You could also have done a search to see if any other files were modified at the same time.

Viewing 1 replies (of 1 total)
  • The topic ‘Determining Source for File Change’ is closed to new replies.