Thanks to everyone for the pointers on this one I've rebuilt the kernels and we'll see what happens.
Seems like they got in because on most of the machines I had an ancient sshd_config which allowed Protocol 1. When I installed newer sshds the newer sshd_config got stuck in as a ".rpmnew" file. >From what I can make out the "visitor" was from Interbusiness.it if anyone is interested. John Collins Xi Software Ltd www.xisl.com Tel: +44 (0)1707 886110 (Direct) +44 (0)7799 113162 (Mobile) - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/