I just had a reboot attempt from http://211.57.159.226 from Korea.
Be very careful with your remote ports and be sure to only be read only, or protect you mining machines with a prety strong password. This http://211.57.159.226 bitch tried to reboot the machine several times. It was pretty easy though to spot him and plant a simple surprise, so he wont be trying that stuff to me anytime soon.