Weird activites in my site. Is my site hacked? Since long time I have been noticing some weird activity going on on my website.

For example:


The includes folder was deleted
CSS files were modified
Node edit access was given to anonymous users


I was thinking it could be human error by my team, but I can confirm they are not doing anything as such because they are just updating the content without touching the site configuration.

I see these users which we never created:


martinm14vxbyycdniot/fallsatj@hotmail.com
qhzcedrichjergsj/obscenehail72mbb@seznam.cz


They show as blocked users and I don't see any content created by them. I searched for the email ids and found they are marked as spammers but dont know what it is. These things are really worrying me. Does anyone know what might be going on?

Is my website hacked?

Update:

few minutes after posting this (and after deleting above users) this user is crated


qhzcedrichjergsj/obscenehail72mbb@seznam.cz
If your site is set up to allow people to register for the site, but requires administrator approval before they're activated (pretty common set up for Drupal), then spammers will manage to register accounts, but the accounts created like that will show as blocked users until they're approved.  That may explain why these blocked accounts exist.  If this is the case, then this is normal, and no grounds for concern.

To make sure only admins can create accounts, navigate to Home » Administration » Configuration » People » Account Settings and tick the radio button "Administrators only" for "Who can register accounts?".

As for the other "weird" stuff you've noticed (includes folder deleted, CSS files modified, node edit access given to anonymous users): It gives grounds for concern, but it is impossible to tell whether it is caused by malicious actions from outsiders, or human error by some careless admin.

If node edit access were given to anonymous users, but no node was ever defaced or otherwise maliciously altered because of this, I would lean in the direction of human error.