Run this search on your own domain: site:yourdomain.com intitle:"index of" If you see any unexpected directories, fix them immediately.
This is the most effective step. In Apache, you can do this by adding Options -Indexes to your .htaccess file. index of password txt exclusive