I am working very dilligently to find exploits, and Michael is working very dilligently to patch them. He has been more than responsive in my postings and dismissed none of them. He has also verified Luna's previous statement of not logging any IP's, and currently looking at encrypting the SQL back end database.
But yes Gasmask was right, there are a bunch of open ports which I pointed out earlier. Michael is currently working with the hosting provider to close all unnecessary pockets.