The Shittening is over!!!
Turns out, well, it was my own damn fault – I had phpmyadmin installed, forgot all about it, and the Chinese spambots were just hammering on that until they got in.
Meanwhile, the city of Redding got hammered by a foot of snow and couldn’t deal. I’d rather take the SQL cleanup over that.