SharedGrid Yup. Good example of why its almost always best to lock down SSH access or any other god mode endpoint to specific IP's. Passwordless authentication doesn't help much if openSSH itself has a serious vulnerability.
Not the first time and won't be the last time.