• PPCMD

    (@ppcmd)


    A few months back, a hacker was trying to hack my website(https://Nilapatri-Group.com).
    I don’t have much information about the hacker, but I have some of his IPs and
    it also shoved that he is from Ukraine.


    91.200.12.60
    37.57.25.225
    46.119.58.190
    91.210.146.174
    54.200.168.99
    104.200.154.27
    54.234.138.240
    52.40.216.165
    91.200.12.33
    62.210.88.186
    52.91.61.189
    31.184.234.145
    91.210.145.59

    Luckily, I blocked all of the IPs, and there were no problems,
    until I got an e-mail from Wordfence about suspicious activity found:

    * Modified plugin file: wp-content/plugins/clean-login/clean-login.php

    * Modified plugin file: wp-content/plugins/clean-login/readme.txt

    * Modified plugin file: wp-content/plugins/login-page-styler/loginPageStyler.php

    * Modified plugin file: wp-content/plugins/login-page-styler/loginPageStylerOption.php

    * Modified plugin file: wp-content/plugins/login-page-styler/lpsFiltersAndActions.php

    * Modified plugin file: wp-content/plugins/login-page-styler/readme.txt

    * Modified plugin file: wp-content/plugins/ml-slider/readme.txt

    * Modified plugin file: wp-content/plugins/payhip-sell-ebooks/README.txt

    Fortunately, I had created a backup copy of my website before the suspicious activity was found.
    So, I just wanted to know whether I should restore my site from the backup. Thanks in advance!

Viewing 2 replies - 1 through 2 (of 2 total)
  • Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    the .txt file chanes change be ignored.

    On the Wordfence control panel area, have it show the differences in the PHP file. Sometimes these are benign — the authors update some php without updating a the version number.

    Thread Starter PPCMD

    (@ppcmd)

    @sterndata

    I checked the Wordfence control panel and found some code missing in the PHP Files. I restored them and everything was fine. Thanks a lot for the help!

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Should I restore my Website backup or not?’ is closed to new replies.