I just watched some obnoxious prick try and hack into my main server a few minutes ago. The gutsy little fsckwit even had the nerve to try logging in as an anon ftp user with an@hack.com as a username. Unfortunately I didn't have portsentry running at the time (I do need to get that to start up on boot) so I ended up yanking the network connection until I could get the source machine blackholed.
He (and I'm pretty sure it's a he, most of them are) is stupid enough to have IIS and an SMTP server running on the source machine. Incredible. 210.69.30.3 for anyone curious.