It's been a while since my last update. So here's a quick rundown of what happened.
My server was compromised. Apparently, there was a unauthorized ssh connection, and the server was running some script that looked like a DDOS attack. It was spamming ssh connections.
A few things I learned, while trying to trace the cause of the hack.
lastb can find recent connections and those that failed.
lsof -i shows a list of open connections.
Facebook locked me out of my account. They gave the reason that they couldn't verify my account, even though I'd sent them my ID. So I'm not sure what's the problem here, and is still sorting out with them.
That's about the more significant things that happened.