disk usage growing (Hacked?)

First, try scanning your site at this Malware and Security Scanner: https://sitecheck.sucuri.net/

Scanned by this remote scanner, nothing found, just an advertising scanner.

actually I used Duplicator “Create Package”, it will scan the wordpress site briefly, the size is 280 mb and the MySQL is about 11 mb. (i.e. the increased usage for MySQL database is not the wordpress database but another datebase)

So I think the problem is outside the public.html directory.

does not look your site has been comromised.

From a security standpoint, review this codexto harden your site: https://codex.www.ads-software.com/Hardening_WordPress

Tara, do you think your suggestion useful ?

Also google you site name, is it turning up in unexpected places ?

Look at your website logs, anything being accessed you don’t know about ?

What is happening to your site’s bandwidth usage ?

SiteCheck won’t help in this case.

I’d check your database to see if you’re being loaded with SPAM. Often comes via comments that go unchecked – allows anyone ot add, etc….

Tony

I am having the same problem. Starting 9/12/14 disk space usage jumped from practically nothing to up over 12gb. I used SiteCheck, didn’t find anything. I’m looking into the databases now. I’m not very familiar with looking through databases, but I will let you know if I find something. Please also let me know if you find a solution.

Lacey

“cageFS” is related to your web hosting provider running CloudLinux. I suggest you contact them to determine the usage of the space, they have more tools available at their disposal than you do as an end user.

I ended up deleting several of the backups created by Updraft Plus, hopefully that fixes the problem. I kind of doubt that is the problem though because those backups were each created a week a part. It doesn’t really make sense that it would cause my disk space usage to jump 12GB all at once, unless the tool my hosting account uses to show disk space usage started working or stopped working on 9/12.

Search your database for these terms:

viagra
levitra
payday
casino
rolex
left:-
left: –
top:-
top: –

See if you can find any injected spam.

I searched the databases like rngdmstr recommended (thank you!). It says there is one match inside table PROCESSLIST.

What should I do now?

Any help is very much appreciated!

Have you already contacted your host regrading their thoughts on what is taking up the space?

Tony

Tony,

Thanks for responding. Yeah I called support, they looked through things and didn’t see an obvious answer. They suggested I go through every folder and look for very large files. I looked through all the folders that had been recently updated and the only kind of large files were the backups. I deleted most of those, but there is not much of a change in the disk space usage, still over 12GB.

One of the support people I talked with told me that it would not be caused by something in ny MySQL databases because they are stored on a different server(something like that), but since I did find that one result with spam words there (from rngdmstr’s suggestion) I wonder if he was wrong.

I’ll try calling tech support again tomorrow.

Also check if any of your plugin does not save some kind of datas to database, for example also if cache plugin purge garbage right, revision … many plugins can save tons of datas.