Sucuri message: Post automatically created “Auto Draft”

@martijnatwordpress

That’s a common notification that you get when editing pages, posts, widgets, etc. You will actually see that a lot. Even when logging into the backend, you get that notification. You will also see in the email with those notifications, the username and IP address of the person who triggered the “event.” It should be your username and IP address. If it’s your username and IP address, you do not have to worry. If it’s your username and an IP address that you don’t recognize, that might be an issue. If it’s a username you have no idea who it belongs to, then you have a problem. But like I said, you get those emails every time an edit occurs, cron job completes and so-on.

• This reply was modified 4 years, 2 months ago by carmpocalypse.
• This reply was modified 4 years, 2 months ago by carmpocalypse.

@carmpocalypse

Thank you for your feedback! Yes, I got all the time messages which you are referring to from Sucuri. These are fine and understandable.

This message is different. No one logged in to my website. I didn’t receive an email message from Sucuri that someone logged in

The message showed my website URL and IP address. But somehow automatically a new post was created and then moved to draft. Please see the message I received from Sucuri:

“Event: Post Update
Website: “URL of my website”
IP Address: “My IP address”
Reverse IP: “URL of my IP”
Date/Time: September 19, 2020 1:29 pm

Message: Post status has been changed; details: ID: 8666,Old status: auto-draft,New status: trash,Title: Auto Draft”

Also, no username was showed. When googling, some people had the same experience and mentioned a plugin might have done it. I don’t have a clue.

Kind regards, Martijn

• This reply was modified 4 years, 2 months ago by MartijnAtWordPress.

@martijnatwordpress

Most likely a cron job that was executed.

@carmpocalypse

I think so as well. Thank you for your feedback!