It was a new BX install, i had some mitigation installed, like dfix and denyhosts. No sites, I believe the need for default security that Michael and Greg talked about in other posts is critical to BX success. Steve