My Ubuntu 14.04 server is hosted on a well-known cloud provider.
I noticed today something that usually makes my heart stop:
user@myserver123:/var/log$ screen -ls No Sockets found in /var/run/screen/S-user.
I confirmed there was a reboot Friday night (literally the worst time for a reboot to happen).
First I checked
reboot system boot 3.16.0-31-generi Fri Jul 24 20:08 - 19:50 (3+23:42) wtmp begins Fri Jul 24 20:08:04 2015
Attempting to investigate I looked through
/var/log/auth.log and found this:
Why all the
^@ in the log file? Lines above the block of
^@ are normal ssh authentication failures.
I notice it says
(Power Button) on the first line after the
Does this mean someone at the data center pushed the power button on the machine hosting my VPS?