I've gone as far as to completely delete all of my site files and the bots are somehow still posting on the blog.
I have an old WordPress site that is a website with the blog hidden, same as any other site. Now this is a very old site that hasn't been touched in years. Somehow some bots got into the blog a few days ago and started making accounts and posting and commenting spam. And I had all that stuff ironclad lockdown for years, never had a problem. They kicked me out of the WordPress admin. But the craziest thing is the site remained perfectly normal, no visible blog, but I was getting 40 of these notifications a day, spam for all the usual stuff. So today I just pulled the plug or so I thought by going into my host ftp and deleting that entire site, all the files. Sites gone right? Even though the site is gone I am STILL getting these, and they are legit with legit TLS signatures and host. How could my WordPress site still exist if all it's files were nuked from my host server? This one has me stumped.
[link] [comments]