At the absolute very least - access should be aggressively logged and analysed.

And shut it down.