Hacked Site Advice?

I have this shared hosting account for years on Hostgator, on a plan that allows you to host as many sites as you want. I have like 50-55 sites there, most domains already expired and I don't even use (Past projects, projects that failed, etc... Lots of garbage). I currently have a website hosted there ranking pretty well on Google and today, I noticed a pretty huge spike of backlinks on Ahrefs. I checked my site and noticed that somebody uploaded some folders and files (Somebody hacked me or the shared host was hacked), which seem like affiliate redirects and product pages. The backlinks point to this pages. I already deleted all this pages/files, but I wonder what should I do regarding the spammy backlinks (I noticed that they come from other hacked websites, so they are not that spammy at all, but they do have weird anchors)? Should I disavow or leave as it is? I'm looking for some input on what to do in this situation. Thanks!

@pewep can you help me with some spiritual guidance here?

Omg.. thats insane.

i feel your pain.

sorry,i don't trust any shared host...

maybe if you have 55 sites. migrating to AWS or google cloud with your own WPMU site might be a better idea,so you can centrally manage all the security as well.

Hmm.. secure the installation first? restore the installation of your CMS, then try to lock it with a 2FA like google authenticator, then restore the database, then install a software firewall or antivirus or something, if on wordpress then wordfence is a good idea...

For the weird backlinks, you probably have to contact google...

hope things will be fine for you.

TiagoS said:

so they are not that spammy at all, but they do have weird anchors)? Should I disavow or leave as it is?

Click to expand...

depends how weird the anchor; but you may have gained good links without committing a crime yourself.

if they look like spammy bad links, dissavow, if the anchors are wierd chinese other language anchors disavow. I had a hack on one site once from using a nulled theme, last time i ever do that they had every 10th view redirect to their affiliate profile, well I had to buy the plugin and do a rebuild of the site to avoid copy pasting anything infected over. That fixed things, the 2 days to do it cost much more then the damn $50 theme would have

disavow. If google gives you a manual action ontheir WMT for hacking, explain. move host