I just had a reboot attempt from
http://211.57.159.226 from Korea.
Be very careful with your remote ports and be sure to only be read only, or protect you mining machines with a prety strong password. This
http://211.57.159.226 bitch tried to reboot the machine several times. It was pretty easy though to spot him and plant a simple surprise, so he wont be trying that stuff to me anytime soon.
Why in the hell would you leave this open to the internet? Putting this behind a simple VPN or at worst a firewall with restrictive ACL's is simple, and all but free.