Guest,
I was running a 5.6 box with most recent updates (i think update 6, is this correct?)
I had contribs installed, but they were nothing out of the ordinary -- including AWStats, Backup2WS, Damien Curtains Email SSL Contrib, Disk Utilization, CLAMD AV and thats it I think.
I did not many any non-standard changes in any way other than contribs above. Machine was configured as server+gateway. No VPN, SSH was on for public but nothing else (FTP etc closed). I was using strong passwords.
I was running 3 sites that included an installation of Mambo Open Source (a CMS), Gallery on another IBAY (pictures), and the third website was just plain HTML.
Again, this is nothing strange here -- I am generally a stickler for security and always make sure files are correct ownership and permissions, etc.