I had a call last night from my ISP to say that my server (on which Smiffy's Place is hosted) had been generating exeptional traffice – Gigabytes of it.
I am willing to put my hand up and say that I've been hacked; no client data has been compromised and no content on the server was damaged – I am just in for a hefty bill for all the bandwidth that my unwelcome visitor managed to eat up. I have isolated and fixed the vulnerability that go them in.
MORAL: No matter how small your service, if you are an IT professional running systems connected to public networks, at least once in your career, you will get hit.
The silver lining to this little cloud is that I have written a programme to spot processes run by the httpd owner that shouldn't be there – I'll post a link soon.