How to know if your server’s been hacked (and what to do)