> A lot of 'rouge' ssh traffic comes from hacked machines.

And they're owned by the Hell's Angles or Red China, I bet.