What to do when a website again and again hacks and uploads malware

What to do when a website again and again hacks and uploads malware. One of the websites in my hosting was attacked again and again by hackers. I removed every virus but attacked again and again daily and uploaded lots of malware into the system. I scan through Immunity AV and delete every malware. For protection, I enabled CSF (necessary port allowed), ModSecurity, and immunity av also disabled SSH root login. on the other hand, When I try to add an SSH public key to login after saving the public key it is gone and it cannot save. how to enable ssh public key-private key to login for root

I don’t know why this happened every day, how to get over it, and how to solve it.

Bet your site have nulled theme or plugins or malware was not cleaned properly.

1 Like