Hello,
Your server is hacked so I will suggest you please setup new server and install server security packages and then mitigate your all sites to new server, Because hacker has found the backdoor on your server OS and due to that you will have to reinstall your server OS