By default kloxo is setup on ports :7777/-8 so we can get there by pass:
domain.com:7777
It's good but for additional "extra" layer of security I suggest to do something like:
domain.com:7777/dir_name/
So when someone try to bypass all ports to find our panel and do some "dirty things", this person will need also to know what is "our dir" to display panel which is practicaly impossible. "dir_name" should be simple configurable directory name editable via kloxo panel.
It's more like a suggestion, enjoy to comment.