11 years of experience in linux. First of all i will check your servers for rootkits. Then i'll check your webservers for holes (php version, installed scripts and so on), then i'll update all apps, in the end we will develop network plan together which will be implemented in firewall (ipchains/iptables - whatever you use) on each server.