wtmp filling up fast... What are these entries?

Hi Admin'ers

We have a server where the /var/adm/wtmp file is getting to 8GB over two or
three days.
The user logins to this server are about 10 - 20 per day. (i.e. via telnet
or ssh)

Does anyone know what these rshnnnnn logins represent. They seem to be
coming quick and fast!

root pts/1 <server> Aug 16 06:03 still logged in
root rsh1802398 <server> Aug 16 06:03 - 06:03 (00:00)
root rsh2535842 <server> Aug 16 06:03 - 06:03 (00:00)
root rsh1634346 <server> Aug 16 06:03 - 06:03 (00:00)
root rsh2347392 <server> Aug 16 06:03 - 06:03 (00:00)
root rsh2048232 <server> Aug 16 06:03 - 06:03 (00:00)
root rsh2548162 <server> Aug 16 06:03 - 06:03 (00:00)
root rsh2548160 <server> Aug 16 06:03 - 06:03 (00:00)
root rsh2548158 <server> Aug 16 06:03 - 06:03 (00:00)
root rsh1450196 <server> Aug 16 06:03 - 06:03 (00:00)
root rsh901242 <server> Aug 16 06:03 - 06:03 (00:00)
root rsh774594 <server> Aug 16 05:48 - 05:48 (00:00)
root rsh1233046 <server> Aug 16 05:48 - 05:48 (00:00)
root rsh774592 <server> Aug 16 05:48 - 05:48 (00:00)
root rsh2064400 <server> Aug 16 05:48 - 05:48 (00:00)
root rsh815300 <server> Aug 16 05:48 - 05:48 (00:00)
root rsh815298 <server> Aug 16 05:48 - 05:48 (00:00)
root rsh999502 <server> Aug 16 05:48 - 05:48 (00:00)
root rsh2486632 <server> Aug 16 05:48 - 05:48 (00:00)
root rsh1904676 <server> Aug 16 05:48 - 05:48 (00:00

TIA



Sean

Relevant Pages

  • Re: How to read a file from another server? Newbie
    ... Sean, what kind of server are you trying to get at where the file exists? ... > ssh I think. ...
    (comp.lang.python)
  • Re: How to read a file from another server? Newbie
    ... I am just going to run the cgi script from the ... server the file is on. ... > Sean, what kind of server are you trying to get at where the file exists? ... >> ssh I think. ...
    (comp.lang.python)
  • Re: Apache Software Foundation Server compromised, resecured. (fwd)
    ... this was one "result" of the comromised ssh binary at sourceforge. ... a public server of the Apache Software Foundation ... > (ASF) was illegally accessed by unknown crackers. ... > exhaustive audit of all Apache source code and binary distributions ...
    (FreeBSD-Security)
  • Re: FreeBSD Crash without Errors, Warnings, or Panics
    ... I suppose I could run on stable until the driver is fixed in a release branch, but I need this box up and online, and I've always read that the stable branch is not the place for production servers. ... I'm running 6.0-RELEASE-p5 on a Toshiba built server: dual Xeon Intel motherboard with a LSILogic MegaRAID controller. ... Also, some network ports still respond, like a telnet to port 22 to test SSH will yield an SSH banner, but trying to connect with SSH just hangs. ... The box runs a web-based app and connects to a local Postgres DB which seemed to be unable to start new connections being requested by the PHP scripts. ...
    (freebsd-hackers)
  • Re: restrict ssh access
    ... > We have one ssh server which receives about 6000 failed attempts to ... > unsuccessful login attempts per client IP address? ... the remote server is also running OpenSSH. ...
    (comp.security.ssh)