MAINLY, they were using obsolete Apache software with
NO firewall.
BASICALLY an invitation to get gangraped.
THE WONDER IS THAT it didnt happen sooner.