I would be suspicious of jetty it appears to be a standalone web server.
There are many posts here on securing your server with a firewall and fail2ban, the "Distro" now comes with a firewall for ease of use. PIAF has had one for a while.
But IF you have been compromised, the only SAFE thing to do is start from scratch as it might well be too late to secure it.