Linux server compromised, external party making fraudulent calls

VPS setup with Centos Web Panel + firewall

Nginx setup on DigitalOcean Ubuntu