奇怪，WP被投毒了

一般整个站就丢那，没管 刚收到个netcpu的邮件，说滥用 我装了aapanel,用户名和密码都是安装时随机的，存在bit 面板设置了22端口限ip访问 ========== Abusemeldung / Abuse report ========== We were asked by the company DHL International GmbH to assist with respect to trademark matters in domain or other online issues. DHL International GmbH recently became aware that a website hosted by your company is being used to impersonate the official DHL International GmbH website. The DHL website can be accessed here https://www.dhl.com. The URL https:///wordpress/wp-content/upgrade/DH24USCA/RDGDESDZRFSYJNOI/index.php?FGDD=1 is pointing to the 202.61.237.89 displaying a phishing website impersonating the official web presence of DHL. Accordingly, given that the infringement is unequivocally unlawful, we request your written assurances within 1 business day that you will suspend or terminate the hosting for https:///wordpress/wp-content/upgrade/DH24USCA/RDGDESDZRFSYJNOI/index.php?FGDD=1 immediately. Mit freundlichen Grüßen Ihr netcup Team wordpress这个目录是安装包解压目录，一直没删除