A friend had me look at a server that had been compromised by SSH bruteforce a few months ago. The intruder was using it as an IRC bouncer, and he was a romanian named Alexino.

I actually found him on the IRC network, and he tried to get me to pay him to tell me how he got in :)