So I want opinions...

I have a client that puts so much stress in my life but he has never been late and never cheapens out, 10+ years.

He has 9 sites, separate from each other.

It was late at night so only the WordPress files were uploaded. He didn't want the MySQL database or installation to occur until the morning...I said whatever...

No messages the next day, 11 days later he comes and wants to continue.

For those 11-12 days later...the files sat there, no installing.

So we went to see the sites and 3 of them had WordPress installed...I went to see the MySQL databases and none existed. I looked in the wp-config.php and the MySQL databases were some external databases on a .de (Germany) site.

He thinks some evil bot attacked his 3 sites and the other 6 are going to be attacked.

So in your opinion, did an evil bot or a human setup WordPress in those 3 sites. Please give a quick reasoning for your answer.

This is the client that calls me at 3 in the morning if there are 3 spam comments, again, evil bots trying to hack his sites and I am sure his microwave. He is somewhere in Europe so 3am is like 8/9/10am for him.