In my ssh logs this morning I noticed a couple login attempts with
usenames on them... I've never seen that before. It is usually just an
IP address.

Mar 18 20:19:48 [sshd] refused connect from postmaster@dns.cablecentro.net.co
Mar 18 23:42:44 [sshd] refused connect from 211.116.136.107
Mar 18 23:44:44 [sshd] refused connect from
[U2FsdGVkX19g32YZVKMsQkl+mouWITILOicY4Iq9OQo=]@211.116.136.107
Mar 19 02:41:09 [sshd] refused connect from 221.194.128.66

weird... maybe the bad guys are up to something new.