php - Strange error_log messages in Wordpress. Am I being hacked or should I grant this user DELETE privilege? -


i have 5 small wordpress websites on shared server. websites have wordfence plugin installed, , have been regularly updated. noticed on 2 websites error_log files grow 500mb per day easy. after inspecting 1 of them today i've found inside error_log.

[11-nov-2016 03:34:57] wordpress database error delete command denied user 'myusername'@'localhost' table 'mydatabase_wflocs' query delete mydatabase_wflocs ip='\0\0\0\0\0\0\0\0\0\0����<�' made wp_signon, do_action('wp_login'), call_user_func_array, wordfence::loginaction, wordfence::alert, wfutils::getipgeo, wfutils::getipsgeo, wfdb->querywrite

[11-nov-2016 03:36:00] wordpress database error delete command denied user 'myusername'@'localhost' table 'mydatabase_wfnet404s' query delete mydatabase_wfnet404s made do_action_ref_array, call_user_func_array, wordfence::hourlycron, wfdb->truncate, wfdb->querywrite

[11-nov-2016 03:36:00] wordpress database error delete command denied user 'myusername'@'localhost' table 'mydatabase_wfvulnscanners' query delete mydatabase_wfvulnscanners made do_action_ref_array, call_user_func_array, wordfence::hourlycron, wfdb->truncate, wfdb->querywrite

[11-nov-2016 03:36:00] wordpress database error delete command denied user 'myusername'@'localhost' table 'mydatabase_options' query delete mydatabase_options option_name = '_transient_doing_cron' made delete_transient, delete_option

there's process trying delete data tables related wordfence plugin using legit username, it's blocked. looks suspicious me. there way inspect code trying this?

edit: checked error_log file again , grew 500kb in 4 minutes since deleted file. errors this:

[11-nov-2016 03:46:20] wordpress database error delete command denied user 'myusername'@'localhost' table 'sv_postmeta' query delete sv_postmeta meta_id in( 98 ) made do_action_ref_array, call_user_func_array, wp_scheduled_delete, wp_delete_post, wp_delete_post_revision, wp_delete_post, delete_post_meta, delete_metadata

[11-nov-2016 03:46:20] wordpress database error delete command denied user 'myusername'@'localhost' table 'sv_posts' query delete sv_posts id = 25 made do_action_ref_array, call_user_func_array, wp_scheduled_delete, wp_delete_post, wp_delete_post_revision, wp_delete_post


Comments

Popular posts from this blog

sql server - Cannot query correctly (MSSQL - PHP - JSON) -

php - trouble displaying mysqli database results in correct order -

C++ Linked List -