> A stab in the dark, but is it possible this machine has services exposed to the internet, and you'd not applied fixes against the recent shellshock bug? > Jip ... ssh, apache, postfix, popa3d ... come to think of it ... all the candy is available ... lol ...