My server got hacked

I hosted this local spigot server on my IP address through my raspberry pi, I set up a DDNS on my router a gave to a few close friends.

The super flat world was griefed but I do not know how this random account got my dynamic IP, which was set through NOIP.

Any help is appreciated. (I covered my account information just to be safe)