Today when accessing users' files, I could see two files in odd minimum, and the code is something to capture data from my server. Does stole some information?
The ip of hack: 82.102.215.191
The files: am.php
http://pastebin.com/U0KUjGKP
SheLL1.PhP.txt
http://pastebin.com/NZeFpvA8
Look ...