My server is hacked

Hi all,

I just installed the CWP and it looks wonderful

however we had an unwanted login from Japan.

We have a fairly strong password with caps, letters, numbers & symbols

How did he get in?

Below is a screenshot of the CWP User Admin Panel



http://prntscr.com/lvttj5

you should check access logs from cwpsrv

Just installing CWP is not enough to ensure the security of your server.

You have a firewall installed..?!
You check regularly you logs..??
You have installed Logwatch, LogCheck, or similar tool..??
How you are reactive with security events in your logs..??
Servers connected to the internet suffer from constant virtual harassment, and should be constantly monitored.

However, all this may still not be enough. Your server has scripts / programs installed, of which you know / audit .. ??
The security of a server is like a "chain": it is as strong as its weakest link.
You can monitor all your logs, but if you have programs with weak security, that's where the crackers will come in.
It all depends a lot on your experience as a server administrator.

Regards,
Netino