Hello,
Thank you for contacting the support and sorry for any inconvenience that might have been caused due to that.
These URLs are created because of malware attack. I would suggest to run the malware scan of your website and clean those. Once the website is cleaned, it’s better to do 301 redirect of these URLs to homepage. As it’s better to Google that these URLs are not valid and needs to removed from SERP on next crawl.
Also, to be able to suggest proper 301 rule, we need to find pattern of those URLs, please share some URLs. You can use this code in .htaccess to redirect. 
RewriteEngine on
RewriteCond %{QUERY_STRING} ^72/459765\.html$
RewriteRule ^db\.php$ https://www.koaexpeditions.com/? [R=301,L]
NOTE: Please take a backup before doing any changes.
Looking forward to helping you.
		
	 
	
	
	
	
 
			
				
	
	
		
		Hello,
We are super happy that this resolved your issue. If you have any other questions in the future, know that we are here to help you.
If you don’t mind me asking, could you please leave us a review (if you haven’t already) on https://wordpress.org/support/plugin/seo-by-rank-math/reviews/#new-post about your overall experience with Rank Math? We appreciate your time and patience.
If you do have another question in the future, please feel free to create a new forum topic, and it will be our pleasure to assist you again.
Thank you.