>Sorry I have to disagree. We installed a sonicwall, had everything turned off but we still got hacked. Lucky the sonicwall reported the hack almost immediately and everything was shutdown. Real question in my mind why! There is nothing that the client does (no credit cards, just manufacturing data) that was even worth the time.

Nothing is bullet proof. I do not know the exact reason for the situation but IIS is well recommended and as solid as any other Web servers IMHO. There are some people on this planet who can enter anywhere. Lucky for the world, most of them are on the good side. So, they help major companies to secure their stuff. Just take last week issue with Visa and related credit card companies if I recall correctly. This was a major hack. As far as why they targeted your site, most of the time, there are no specific reason. It happened here as well. A few years ago, many hackers from the University of Bejing, at least they originated their attempt from, tried to hammer this site. They tried several times during the year and when I lost patience, I simply closed the entire route coming from there. There was no specific reason. In most cases, they are trying their skills and they will identify one site and use it until they cannot access it anymore. And, if your site would have processed credit cards, yes, I would think this could have attracted other groups of hackers, the ones trying various card numbers to see which one they can use and so on. But, as you said, this was not a factor. So, they probably just use your site for a while for testing purposes for their own needs until you shut them down.