Server constantly hacked

[dynamitedj84]

Hi,

I apologise if this is the wrong group/topic however i'm now in need of some assistance, for the past week every day my server is being attacked and my root password is being changed, the attacker is then proceeding to set the whm notification email to their own gmail account, they are then proceeding to create multiple domains and park them on the server.

I have had a security specialist harden the security of my server however they are still finding a way in, i have had the server formatted and a backup implemented with further security hardening done however they are still finding a way in and locking me out, i have checked today and after the attacker has found i've deleted all of their accounts and removed the reseller privelidges from any of the accounts they have now terminated all of the domains on my server and removed the files and still continue to try to cause further problems, because of this i've had no option but to temporarily shutdown the server in hope that somebody / anybody can offer some assistance with the problems i am facing.

Thanks

Dan

 

[cPanelMichael]

I have had a security specialist harden the security of my server however they are still finding a way in

Hello

I suggest consulting with that company to let them know what's happened. Or, you may want to search for reviews of security specialists before hiring another one.

Thank you.