Hi,
I have gone through your requirement, I understand your webserver is hacked many a times which means there may be a backdoor already created by the hacker. Finding the backdoor is main thing at this point of time. As per my proposal, please forward me your website address, I will check all the potential threat with respect to your websites, then only we can go ahead with the mitigation steps.
Let me know the following info to give you with all the threats may be available towards your server.
IP address or URL of your sites.
Regards
KUVTECHNOLOGIES