Here’s what happens to unfirewalled and unpatched systems (roughly around) 20 minutes after connecting to the Internet :
This pic was taken from the one of the TrendLabs honeypot systems earlier this day. All these internet Explorer windows were opened by bots, since there is no user-interaction-clicky-click being done.
Will the user click ‘Yes’?