[gentoo-security] SSH login attempts and /var/log/wtmp

[Bryan O'Shea]

I have had these scans/logins attempted on one of my servers.
I see all the attempts for guest,admin,test in my logs.
They also show up when i run the command 'last'
to see what users obviously have last logged in and a user test
shows up.  The log in time shows for 0 time logged in.  I did not know 
that incorrect login attempts would show in the output of the command 
'last' or even users that don't exist on the system.
Maybe someone can explain what this means?

thanks

--
gentoo-security@g.o mailing list