Well, the odd time I’ve attached a computer directly to the Internet (and it makes me uncomfortable every time I do it), the logs were noting an access attempt every 2-4 seconds.
Didn’t notice much on port 25 (mail), but you are probably in for a lot of hacks attempts if port 22 (ssh) is open. I’d say 20% of the attempts were ssh logins.
