I have some security issue with my website. It started by creating wp-admin directory on my FTP server with malicioust .txt file. index.php was also changed (some code at the beginning was added)
I changed all passwords and completely deleted the CMS folder from the server. I removed also wp-admin directory and malicious code from index.php
Lots of unauthorized connections to my website started with this change.
Detalis here: database log
All calls to .shtml files were blocked by .htaccess file. Unfortunately there are still attempts to access other resources
for example:
- /wp-load.php?daksldlkdsadas&
- /ajax-index.php?url=http://domainnamespace.top/lf.jpeg
- /aindex.php?daksldlkdsadas&
- /wp-load.php?WordPress=newzealandpolicy.wang/popn.txt&Database=1index.php
- /sitemapimages79.xml
- /sitemapimages5.xml
How can i prevent this calls? What kind of attack is it and what is its purpose?
It's not wordpress based website