Someone hacked my Tomcat server

[minestrone]

They're very unlikely to be coming directly to your machine - there are millions of compromised boxes out there for them to proxy through.

EDIT: looks like it's an automated thing.

That was the first page I hit when I googled the war file.

I am actually surprised they have not done anything about it since the guy posted it. Actually, tomcat is now pretty much a IBM/Apache/RedHat project so I am not surprised.

[scooterscot]

The average life expectancy of an unpatched, unprotected windows box connected to the net is around 10 mins. After that the chances are you will never have complete control of it again.

Do your config/patching/installs of AV and firewalls *before* you plug in the network cable.

I've just put a windows installation via parallels open to the internet. Days pass no problem runs smoothly.

What did I do?

I stripped it of every service you could imagine since I require it to run only one installation.

It's all the stupid services that let this platform down IMO. I used XPlite.