There is no such thing as urgent around here. Please
EaseUp.
You said you closed some ports. Did you perhaps close one of the ports necessary for the remote JBoss queue?
Also, after a server has been hacked you shouldn't just assume it'll work again after closing some ports. The hacker may have left some nasty programs running. Usually you find out how he came in, reinstall the machine and make sure he can't come in through the same way.