SSH scans - I caught one
<i>cd /var/tmp;</i><p>When I see things like this it makes me think that if standard paths weren't used, then it would it at least make things a little more interesting for the hacker. (They'd have to find a location first.)