How do I not get bungeehacked?

I use XCord which is a fork of BungeeCord. How can I not get bungeehacked, and how do I test for it?

Also, is it ok if I host 3 of my servers (1 Bungee + 2 servers) on the same IP but different ports?