WinCF reboot on its own about 10 minutes ago with a blue screen but came back within 3 minutes, it is alerting again now and being very very slow it looks like may need a chkdsk on it.
It actually looks to be some major abuse on CF service, which is why it came up well, but got bad afterwards. The cpu is pegged on 100% making anything we do very slow. Still working to resolve.
We have CF services responding again for a while now, keeping a close eye it was an attack but on a specific non hosting port which we were able to filter out. Watching to see if any changes or that is the end of it.
