In addition to what others say - first firewall, then lock down services in turn - consider running OSSEC or another intrusion detection system if you are concerned about intrusion.<p>But really this is the OP&#x27;s problem: he ran a system open to the internet without any apparent analysis of attack vectors. Server was compromised due to incompetence - not developer incompetence, but operations incompetence, a different discipline.