
Closed
Posted
Paid on delivery
My cPanel/WHM server has been breached: the attacker reset the root password and every hosted site, mailbox, and database is now offline. I currently have zero access to WHM, SSH, or any other administrative tool, and—unfortunately—there are no usable backups. Scope of the incident • The machine was running Web hosting, Email hosting, and Database management services under cPanel/WHM. • Root credentials have been altered; all accounts are unreachable. • Provider-side rescue/KVM access can be arranged if that helps you regain control. What I need done 1. Regain root-level access. 2. Identify and neutralise the point of entry or malware. 3. Restore Apache/Nginx, Exim, and MySQL/MariaDB services so sites, mail and databases function again. 4. Patch and harden the server (CSF, ModSecurity, SSH, etc.) to prevent repeat compromise. 5. Configure an automated off-site backup strategy so I’m never left without a restore point again. Acceptance criteria – Verified root login restored to me alone. – Websites load correctly, email sends/receives, databases are functional. – A brief incident report outlining what was found and fixed. – Scheduled backups running and tested. Let me know the methodology you plan to follow, the approximate timeline for each step, and any information you need from my hosting provider so we can start the recovery immediately.
Project ID: 40410922
72 proposals
Remote project
Active 3 days ago
Set your budget and timeframe
Get paid for your work
Outline your proposal
It's free to sign up and bid on jobs
72 freelancers are bidding on average $147 USD for this job

Hello. I would like to help you with recovery cpanel server/clean malware and optimization apache/memory/php/mysql issue I have experience. Please read my feedbacks. Thank you.
$40 USD in 1 day
8.0
8.0

As a highly experienced and knowledgeable technology professional, I have worked extensively with cPanel/WHM servers, especially in instances of compromised security. My expertise spans across multiple operating systems, web servers, mail servers, database servers, firewalls, and hosting panels which puts me in a prime position to recover your server.
$140 USD in 1 day
7.0
7.0

Hi, I am Linux admin,Wordpress,PHP programmer having 10 years of experience. I am very good in wordpress,php,mysql,joomla.
$100 USD in 3 days
6.6
6.6

Hello, Most ERP reporting issues don’t come from dashboards—they come from inconsistent data flows and weak process alignment. That’s where I focus. I can help you clean, standardize, and structure your ERP data, then build dashboards that actually reflect reality and support decision-making. My approach: Audit current data flow (inventory, production, sales, finance) Identify gaps, duplication, and inconsistent logic Fix root causes (not just report outputs) Standardize units, naming, and reporting rules across departments Build clear dashboards with actionable KPIs (operations + financials) What I’ll deliver: Accurate, consistent reporting across modules Dashboard views with real-time visibility Improved workflows to ensure clean data input Documentation for long-term scalability Relevant experience: ERP integrations + workflow automation (Node/Python systems) Data pipelines, reporting logic, and dashboard design Inventory and transaction-heavy systems Example improvements: Fix broken/missing report fields (e.g., shipping labels) Calendar-based tracking for operations Unit conversion standardization across SKUs Availability: I can align with EST/CST working hours. Quick questions: Which ERP system are you currently using? Are dashboards built inside ERP or via external tools? I focus on making reporting reliable—not just visually appealing. Regards, Jay
$140 USD in 1 day
6.4
6.4

Hello, I hope you are doing well. With 8 years of experience as a Server Administrator, I have extensive knowledge of various server technologies, troubleshooting techniques, and performance optimization. I can analyze and resolve any server-related issues efficiently based on your requirements. Please feel free to reach out if you have any queries or need assistance with server management. I’d be happy to help. Best regards,
$150 USD in 2 days
6.7
6.7

I have nearly a decade of experience as a web hosting expert, specializing in fixing, cleaning, and optimizing WordPress sites. I understand just how critical a compromised server can be for both your business and peace of mind. Having resolved over 650 similar issues to what you're facing, I am confident in my ability to fully restore your cPanel/WHM system, regain root-level access safely, neutralize any malicious activities, and implement proactive measures to harden your server against future attacks. As each situation has its unique challenges and dynamics, I'll need more details to provide you with an exact timeline. However, rest assured that I prioritize swift but thorough solutions so that your websites, emails, and databases are back online quickly without sacrificing quality or security. My commitment doesn't stop there; I'll proactively fortify your infrastructure by patching your server with reliable tools like CSF, ModSecurity, SSH etc., to ensure it becomes impervious to similar incidents in the future.
$80 USD in 1 day
6.0
6.0

Hi, Can you provide access to your hosting provider for rescue/KVM access? I can help regain root access and identify the breach. I’ll first analyze the compromised server environment to restore the root credentials. Then, I’ll ensure the services like Apache/Nginx, Exim, and MySQL/MariaDB are operational again. After stabilizing the server, I’ll conduct a security audit to identify vulnerabilities and neutralize any malware, followed by implementing security patches and setting up an automated backup strategy. I’ve worked extensively with cPanel/WHM for over 8+ years and understand the recovery process thoroughly. I can provide you with a detailed incident report outlining my findings and resolutions. Let’s get your services back up and running ASAP! Best Regards, Priyanka
$140 USD in 1 day
6.2
6.2

Hello, I can help you recover your breached cPanel server by regaining root access through rescue or KVM and carefully restoring all core services. I’ve handled similar incidents where access, services and security were all compromised, and I keep the approach clear and methodical. Once access is restored, I would clean the system, bring back Apache/Nginx, Exim, and MySQL, then secure everything with proper hardening and off-site backups. Thanks, Teo
$200 USD in 2 days
5.6
5.6

Hi, I have strong experience handling compromised cPanel/WHM environments, including root recovery via provider rescue mode, malware containment, service restoration, and full server hardening on Linux VPS infrastructure. For this incident, I would first work through provider/KVM or rescue access to regain system-level control, then safely reset root access without triggering further damage. After securing entry, I will isolate and inspect the breach vector (auth logs, SSH history, cron jobs, web shells, and modified binaries), remove any malicious components, and restore core services including Apache/Nginx, Exim, and MariaDB so websites, email, and databases are fully operational again. Once stability is restored, I will patch the system, harden SSH access, configure CSF/ModSecurity rules, and implement secure backup automation to an external location to ensure full disaster recovery capability going forward. Best regards, Juan
$140 USD in 1 day
5.5
5.5

Hello, This is a critical compromise, and the priority is to safely regain control, recover services, and prevent reinfection. I can assist with full recovery of your cPanel/WHM server using a structured approach: 1. Access Recovery Use provider KVM/rescue mode Reset root access securely Check for unauthorized SSH keys/backdoors 2. Investigation & Containment Analyze logs (auth, cron, processes) Identify entry point (exploit, weak credentials, etc.) Remove malicious users, scripts, and persistence 3. Service Restoration Restore WHM/cPanel access Recover Apache/Nginx, Exim, MySQL/MariaDB Bring websites, email, and databases back online 4. Hardening Secure SSH access Configure CSF firewall & ModSecurity Patch vulnerabilities and lock down services 5. Backup Setup Configure automated off-site backups Verify restore process Timeline: Access recovery within hours, full stabilization within 24h (depending on severity). Required: KVM/rescue access from provider Server OS details I have experience handling compromised Linux/cPanel servers and focus on clean recovery without reinfection risk. Ready to start immediately. Best regards, Danang
$140 USD in 7 days
5.6
5.6

As a seasoned full stack developer with over 10 years of experience in digital solutions, I’ve tackled and resolved some of the most complex server issues throughout my career. I specialize in services including website development and design, mobile app development, UI/UX, SEO, API integrations, and more. Your cPanel/WHM server breach can be an overwhelming task to resolve but I will deploy a comprehensive strategy of operation to regain root level access, identify and neutralize the point of entry or malware, restore Apache/Nginx, Exim and MySQL/MariaDB services to ensure your sites are up and running smoothly. Your final deliverables will include complete root login restored solely to you alongside a detailed incident report summarizing what was fixed as well as an automated off-site backup strategy for scheduled restorations. I guarantee you my adherence to timelines without compromising deliverable quality on your project. I value open communication and would keep you updated at every step towards your project’s completion. Let me leverage my proven track record into yours by resolving this urgent issue with precision and haste!
$150 USD in 7 days
5.3
5.3

Hi there, This is a critical situation, but with KVM/Rescue Mode access, we can reclaim and harden your environment. My priority is data preservation—since you have no backups, we will systematically purge the threat without a full wipe. Recovery Methodology Regain Access (2-4 hrs): Using KVM/Console, I will boot into a Rescue Image to manually reset the root password and flush unauthorized SSH keys. Forensic Triage (4-6 hrs): I’ll analyze logs (secure, access_log) to identify the entry point and run maldet to neutralize web shells and malware. Service Restoration (4-6 hrs): Repairing MariaDB tables and rebuilding cPanel configurations to bring Apache, Exim, and MySQL back online. Hardening (Ongoing): Deploying CSF/LFD, SSH key-only access, and ModSecurity (OWASP) to prevent a repeat breach. Off-site Backups: Configuring an automated, encrypted S3-compatible backup routine. Timeline: 24–36 hours for full stabilization. Ready to start Step 1 immediately. Best, Pallvi GuptaServer Security Specialist
$100 USD in 2 days
5.1
5.1

I can handle this server breach recovery end-to-end and get your services back online safely. Approach: • Regain access via provider KVM/rescue mode → reset root securely • Full audit (logs, cron, backdoors, malware, suspicious users) • Remove exploits + patch entry points • Restore services (Apache/Nginx, Exim, MySQL) • Verify sites, email, databases working Security Hardening: • CSF firewall, ModSecurity, SSH lockdown • Disable vulnerable configs, update packages • Set up automated off-site backups (daily + tested) Deliverables: • Root access restored (secure credentials) • Fully working server (web, mail, DB) • Incident report (cause + fixes) • Backup system configured ⏱️ Timeline: 6–12 hours recovery + hardening We should connect on a call immediately due to urgency Ready to start now.
$140 USD in 7 days
5.3
5.3

# Immediate Start )))---- Timline :- ✔️5-6 Hours Share C-panel Details. I can Quickly help regain Root access via provider rescue/KVM mode, Remove the intrusion, & Restore Apache, MySQL, & email services. -- 12 yrs Experince.
$120 USD in 1 day
4.7
4.7

Hi, this looks like a server compromise where root access was changed and core services stopped. I work with Linux and cPanel servers and have handled recovery and stabilization for live production systems. The first step would be to regain root access through rescue or KVM, then check how the breach happened, clean any malware or backdoors, restore Apache, Exim, and MySQL, and finally secure the server and set up proper off-site backups so this does not happen again. From similar incidents, the work usually breaks down like this: Regaining root access — about 1 to 2 hours Investigating and cleaning the breach — around 2 to 4 hours Restoring websites, email, and databases — 1 to 3 hours Hardening the server and configuring backups — 1 to 2 hours So in most cases, full recovery takes roughly 6 to 10 hours, depending on the current state of the system. I have supported production deployments and server recovery work where uptime and reliability were critical. Do you already have rescue or KVM console access available from your hosting provider so we can start immediately?
$200 USD in 2 days
4.8
4.8

Hello there, We can get this recovered but you have to provide us all the credentials you have no matter if those are not working now and also the WHM/cpanel must be uder your ownership. I am waiting on your response to get started on this. Regards Yaseen
$240 USD in 2 days
4.8
4.8

With over a decade of experience as a seasoned Web Engineer, I can confidently say that there's nothing as challenging and rewarding as restoring the functionality and security of a compromised server. My firm expertise extends well into your urgent needs; web hosting (including cPanel/WHM), email hosting, and database management. My strategy would involve multiple proven stages: firstly, regaining root-level access to the machine with every account. Secondly, identifying the point of entry or malware that caused the breach, before neutralizing it entirely to ensure long-term stability. Thirdly, and most importantly, restoring Apache/Nginx, Exim, and MySQL/MariaDB services to get your sites, mail and databases functional again. Lastly, I will extensively patch and harden the server with tools such as CSF, ModSecurity, SSH etc., establish an automated off-site backup system for added safety and then document in detail all that was found, fixed and secured. At every stage of my methodology, you can rest assured knowing your restoration project is in secure hands. Post-recovery tasks are equally important to me; therefore, I would recommend scheduling regular backups for seamless restoration processes in the future. In conclusion, my skills have been honed through years of experience mitigating issues such as yours – from web hosting to server recovery and optimization projects – thus making me ever-ready for every single step outlined in your project description.
$30 USD in 1 day
4.7
4.7

Having over a decade of web development and security-focused experience under my belt, I'm more than confident in my ability to address and resolve the issues you face with your cPanel/WHM server expeditiously. My diversified scope, working on various platforms including Apache, Linux, Nginx - all crucial components for your site's smooth functioning - reshapes me into someone ideal for this recovery job. Additionally, being a skilled System Admin and Web Hosting professional, I am the perfect fit to retake control and harden the server. I approach each problem individually with a focus on discovering root causes, which is particularly necessary in this rescue operation to not only regain root-level access but also region entrances to avoid future breaches. Through my detailed investigation process, I identify points of entry or malware precisely and neutralize them effectively. Subsequently, reviving Apache/Nginx, Exim, MySQL/MariaDB services stand no challenge alongside me. Moreover, drawing from your very calamity of lost data due to unavailability of backups, I'll set up a robust solution with scheduled automated off-site backups that ensures you never have to fear losing information again. Your project would thrive under my supervision; let's collaborate so we can retrieve all your websites, mails and databases back into their functional states ASAP!
$140 USD in 2 days
5.0
5.0

As an adept web and app developer with over eight years of experience, I have the expertise to handle complex recovery tasks, particularly in server management. I understand the critical nature of your predicament: losing root access and valuable data can be devastating for any business. However, drawing on my extensive skills in Apache, Linux, MySQL, Nginx, and Web Hosting, I'm confident that I can regain control of your cPanel/WHM server. My first priority is to quickly regain your root-level access and assess the situation comprehensively. I'll meticulously identify the point of entry for the attacker or any malware present and immediately neutralize it. With deep knowledge in restoration processes, I assure you that your Apache/Nginx, Exim, and MySQL/MariaDB services will be fully restored to ensure all your websites, emails, and databases function seamlessly again. In addition to restoring your system's functionality, I will also make sure to patch and harden every aspect of your server to prevent future compromises. My skill set extends not only to server recovery but also to implementing vital security measures like CSF, ModSecurity, and SSH hardening. Furthermore, I'll help you implement an automated off-site backup strategy to ensure that you never face this data loss crisis again. Trust me with your project and we'll turn this incident into an opportunity for a more secure future.
$140 USD in 7 days
4.3
4.3

Hi, I can take immediate control of your compromised cPanel/WHM server and restore it safely. Using provider rescue/KVM, I’ll regain root access, investigate and eliminate the breach, and bring web, mail, and database services back online. I’ll then harden the server and implement reliable off-site backups, delivering a secure system with a clear incident report. I have over five years of experience as a systems administrator, working with Linux distributions like CentOS, AlmaLinux, Ubuntu, Debian, Red Hat, and Windows servers. I manage WHM/cPanel, CWP, Plesk, Virtualmin, Hestia, and VestaCP, along with AWS, DigitalOcean, Azure, Docker, and Docker-Compose. My expertise includes DNS management, mail servers (Zimbra, Postfix, Exim, Office 365, Google Workspace), and web servers such as Apache and Nginx and also configure Open Source Storage app ( NextCloud, OwnCloud ). I also handle WordPress, Magento, Laravel, Node.js, and PHP applications. I have strong experience working with databases like MySQL, MariaDB, MongoDB, and PostgreSQL, as well as integrating and managing Cloudflare services. My skills also cover proficient management of email services and web hosting. Kindly chat once. Thank you
$80 USD in 1 day
4.2
4.2

Ajman, United Arab Emirates
Payment method verified
Member since Jun 5, 2012
$50-100 USD
min $50 USD / hour
$100 USD
$10-30 USD
$100-150 USD
₹750-1250 INR / hour
₹100-400 INR / hour
$30-250 USD
$25-50 USD / hour
$15-25 AUD / hour
$30-250 USD
₹1500-12500 INR
$250-750 USD
₹600-1500 INR
$10-30 USD
₹1500-12500 INR
$5000-10000 USD
$250-750 USD
$2-8 USD / hour
£250-750 GBP
₹100-400 INR / hour
₹600-1500 INR
$30-250 USD
$30-250 AUD
$3000-5000 USD