Agree, one session had obviously just had 'rm -rf /' run on it. Now, if you leave a root shell open to the Internet you're kind of asking for it, but this is like posting a list of GPS locations of cars with the keys in the ignition up on a notice board for car thieves...
