I logged into a newly provisioned VM recently to see a message that there had been 86,876 failed login attempts from a domain in another country. Last failed login: Sat Sep 13 04:02:20 UTC 2014 from 222.186.34.117 on ssh:notty There were 86876 failed login attempts since the last successful login. That got me to looking