So I've implemented the changes people suggested except for fail2ban. I'm still reading up on it.

I also didn't change passwords because that hasn't been compromised someone is fishing around looking for an outside line.

Also someone mentioned checking a messages folder. Is it OK to clear out that file? It goes back to May.

I'll keep you guys posted on how it goes. I'll be monitoring the server over the weekend.