iframe

Welcome to the real world.
A fresh installation could be hacked as well.

What should I do with these three files – is it something to be worried about?

Have to doubt, delete them.

There’s something to follow.
FAQ My site was hacked

we haven’t changed our DNS records

Did anyone in your team recently sign up for Content delivery network (CDN)?

First off, you robots.txt is weird.
See WordPress robots.txt An example for great SEO

@swansonphotos
WP CLI allows to update to a specific version instead of to the latest version.

https://developer.www.ads-software.com/cli/commands/core/update/

Great, thank you.
I googled ‘wordpress releases’ before submitting this post, it gave
https://www.ads-software.com/news/category/releases/
there’s no 4.9.9 at all

Thanks again.

• This reply was modified 5 years, 11 months ago by iframe.

I digged it deeper, you are right.

Wordfence Security plugin created this confusion.

False ‘An admin user was created outside of WordPress’

Thank you so much.

Hello @wfasa.
Thanks for taking care.
No, it didn’t happen again, the user has returned home ??

Hi, thank you for your support.
That’s a busy multisite and Live Traffic is disabled.
I have checked Wordfence Logins table in the database, that user logged in once on April 28, the previous login was a few days before.

I just found in my inbox:

gaznicki2504 wrote:

This issue still persists. Will there be an update, that at least gives us information so that we can address the problem?

• This reply was modified 6 years, 7 months ago by iframe.

The ignored result was fixed and scanned again.

“>

Sure.

Thank you.
“>

oops, I didn’t see you already provided your site URL.
Sucuri found nothing on your site.

Hi.
According to Google search, there are more than 10 thousands of “Hacked By Suliman-Hacker” sites.
I scanned one of them with Sucuri and it finds the malicious code easily.

Check your site with Sucuri, let us know.

Thank you.

@wfalaa excellent!

Is there a way to monitor vulnerable headers being abused either probed on the server?
I have a hard time to convince a sysadmin such a hardening is needed.

Thanks again.

You asked me to politely knock on your door but your house is on fire.
Hackers mess up with permissions to hide backdoors.

Your workstation is compromised or else.