Its been a rough month so far:
Saturday I noted that some mutants have been using anon ftp (yes, I know I'm a bonehead for enabling it, even temporarily) to trade files. I nuked them, collected IP addresses and whined to the respective ISP's. What does this mean? I have my server behind a hardware firewall, only the ports I am using were enabled, I have it on a small separate file system and its as secure as an FTP server can be. I log all connections on all open ports. I do this for a living and I know what I am doing.

The scary part is that they found me so quickly and I was hit by Script Kiddies from CA, WA, France, Italy and Germany in a few days.