Title: WordPress hacked.
Last modified: August 20, 2016

---

# WordPress hacked.

 *  [two8nine](https://wordpress.org/support/users/two8nine/)
 * (@two8nine)
 * [13 years, 6 months ago](https://wordpress.org/support/topic/wordpress-hacked-15/)
 * Hi, having serious issues with WP hacking.
 * It happened about two weeks ago, came in to find every bit of the site riddled
   with eval codes. I logged into the database through ftp, and deleted literally
   everything, downloaded wp and reinstalled. (Always keep to the newest version.)
   Changed all passwords, even had our provider change our mysql pw. I installed
   6scan, wordfence security, and ose firewall, plus antivirus and ipblocker.
 * Hack was back within 24hrs. I’ve repeated the process 4 times, with the same 
   result every time — not sure what else I can do. (We were getting slammed by 
   this ip –> 95.211.58.114, but blocking the ip didn’t seem to do much.)
 * Could it be our provider? [http://www.infometrics.net](http://www.infometrics.net)
 * Any tips would be appreciated.

Viewing 6 replies - 1 through 6 (of 6 total)

 *  [esmi](https://wordpress.org/support/users/esmi/)
 * (@esmi)
 * [13 years, 6 months ago](https://wordpress.org/support/topic/wordpress-hacked-15/#post-3185185)
 * You need to start working your way through **all** of these resources to completely
   clean your site:
    [http://codex.wordpress.org/FAQ_My_site_was_hacked](http://codex.wordpress.org/FAQ_My_site_was_hacked)
   [http://wordpress.org/support/topic/268083#post-1065779](http://wordpress.org/support/topic/268083#post-1065779)
   [http://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/](http://smackdown.blogsblogsblogs.com/2008/06/24/how-to-completely-clean-your-hacked-wordpress-installation/)
   [http://ottopress.com/2009/hacked-wordpress-backdoors/](http://ottopress.com/2009/hacked-wordpress-backdoors/)
 *  [The Hack Repair Guy](https://wordpress.org/support/users/tvcnet/)
 * (@tvcnet)
 * [13 years, 6 months ago](https://wordpress.org/support/topic/wordpress-hacked-15/#post-3185199)
 * Unlikely has anything to do with your provider. More likely hacker has installed
   some back door scripts within your site, allowing them to re-hack you anytime
   they wish.
 * You’ll need to have someone review “every” file on your website respectively 
   to ensure none are out of place or were installed by hacker.
 *  Thread Starter [two8nine](https://wordpress.org/support/users/two8nine/)
 * (@two8nine)
 * [13 years, 6 months ago](https://wordpress.org/support/topic/wordpress-hacked-15/#post-3185202)
 * I figured something like that, but how would those remain after deleting everything
   and starting fresh? I’ve followed esmi’s first and third link verbatim for each
   instance — without much luck.
 *  [esmi](https://wordpress.org/support/users/esmi/)
 * (@esmi)
 * [13 years, 6 months ago](https://wordpress.org/support/topic/wordpress-hacked-15/#post-3185204)
 * And what about the second and fourth links?
 *  [The Hack Repair Guy](https://wordpress.org/support/users/tvcnet/)
 * (@tvcnet)
 * [13 years, 6 months ago](https://wordpress.org/support/topic/wordpress-hacked-15/#post-3185205)
 * Sounds like may be time to bring in an expert to resolve this one for good.
 *  [esmi](https://wordpress.org/support/users/esmi/)
 * (@esmi)
 * [13 years, 6 months ago](https://wordpress.org/support/topic/wordpress-hacked-15/#post-3185208)
 * I disagree. There maybe more that the OP can do themselves.

Viewing 6 replies - 1 through 6 (of 6 total)

The topic ‘WordPress hacked.’ is closed to new replies.

 * In: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/)
 * 6 replies
 * 3 participants
 * Last reply from: [esmi](https://wordpress.org/support/users/esmi/)
 * Last activity: [13 years, 6 months ago](https://wordpress.org/support/topic/wordpress-hacked-15/#post-3185208)
 * Status: not resolved

## Topics

### Topics with no replies

### Non-support topics

### Resolved topics

### Unresolved topics

### All topics