a Hacker drive me crazy !

These days i notice something completely stranges with my server

i see an accounts created that i did not create it , some of the accounts hacked although it's content is just HTML files (no php , no databases .. )

and also some accounts changed its contact email by the hacker


what can i do ,

my server is completely up-to-date , Cpanel and WHM 10.0.0 R7

PHP 4.3.9

i disabled PHP Shell functions .

no shell access given to any user !

i know the email of the hacker because he is always change the contact email of some accounts to his email , and also he create some account for his own use on my server !!!


please help me , what is the first step of securing web servers against these types of attacks

thanks

 

 

 

 

Top