hi, i have a very complex problem

i use centos + cpanel

my problem is that some public_html files from my clients accounts are changing permissions to 0

the only way to restore permission is to chattr -i public_html;chmod 755 public_html

after i give the permission in max 2 hour is back to 0

a friend is saying that my server is hacked

any idea?