[Wazza]

They did actually get into our server using this method - installed an irc bot, some tools for attacking other servers and some other stuff that I can't remember.

All that crap was owned by apache so they didn't actually gain proper control. But managed to push our usage up to 32mbps which made it pretty clear something was amiss (thanks fools, you sent up a flare and we fucked you off inside of an hour). We did have awstats running as a cgi...