Webserver security issues

These are good measures but definitely not enough. Attackers are well-versed with network security and they can attempt break-ins when they detect an exposed service.

It is better to have an application firewall and intrusion detection device. Use webshark and nmap and other security toolkits to secure your webserver. Also, make sure that your application is secured and properly configured.