[tomschlick]

Yup install something like fail2ban & setup email alerts. You'll get a new notice every 5 minutes or so for the first month from all the china based bots trying to login via common ssh credentials.

[A010]

I run snort and from its alerts, the bots come from all around the world not all from CN. Though the CN sources are largest.

[protomyth]

I was rather surprised when I had a week where most of the attacks came from Las Vegas and New Hampshire.