Ow man that is bad! Thanks for sharing. Lessons shared from this post: 1- Lock down ALL ports you are not using with either iptables or ufw. 2- Be su

Ow man that is bad! Thanks for sharing. Lessons shared from this post: 1- Lock down ALL ports you are not using with either iptables or ufw. 2- Be sure to always run system updates, even with doing this the exploit still made it in, but the updates can help. 3- Use tools available to you such as iptraf, nethogs, and iftop. 4- Watch your cronjobs and strange startup files I think locking down the ports that are not required is a very important thing to do. I have faced such stuff, but with lower traffic luckily ended up creating a whole instance and server and ripping a part old configs and setup.