Closing ports back-end servers

Hello,
I got hacked by Mr_Wibbles because he logged in with a cracked client in my sub-servers. How to stop that?
I tried OnlyProxyJoin but when I install that on my spigot servers and I put my IP in it it wont work??