Originally Posted by sortie

Dude, unless you have some bad cgi scripts you installed then it's totaly your hosting companies falut. The hackers most likely got in because you had a weak password or you have an old version of SSH installed on the server.

Your host should detect the attempts at your password and shut login down and they should have the lastest SSH installed.