Even if that is the case, why is it exposed to the public? They firewalled it off almost immediately, so I assume it didn&#x27;t need to be...<p>Never expose anything that doesn&#x27;t need to be, SSH tunnels, openvpn... heck, use HTTP authentication wrapped SSL tunnels if you have to. Web servers tend to be more secure than webapps.<p>Mistakes like this are far too easy to make. So anything that isn&#x27;t part of your business application needs to be tunneled with authentication or isolated completely.