If you run a sever with port 22 open, you'll notice about 10 people an hour trying to log in via SSH. These are mostly bots from China trying quick ways to get into your server.

The solution is to change SSH from port 22 to something above 10000...blocking China is just stupid (proxy, anyone?)