Many of us are clueless about the behavior of the network, systems, users, application etc… For the majority it is impossible to dig up some baselines that show how the remote users log in, who logs in from what location.