Whilst I was in Poland, it seems that some morons hacked my server, leaving the web site showing the banner “spykids ownz your server”.

It looks like they got in via a Drupal exploit, from a dial up account in Brasil.

God only knows what else they did - the machine looks intact but I’ll have to regard it as compromised as I’m never likely to be able to prove otherwise.

Luckily for me there isn’t anything of value on it, but it’s a massive pain in the arse. I’d love to hear from anyone else who has had this experience, or has any advice on what to do now!

In the meantime I will soldier on with this server, as I don’t really have any alternative. Ultimately I guess a complete re-install is called for.