[NTLUG:Discuss] OpenSSH - Newbie Question #2

[Terry Henderson]

On 7/5/06, brian at pongonova.net <brian at pongonova.net> wrote:
> On Wed, Jul 05, 2006 at 11:18:55PM -0500, Terry Henderson wrote:
> > Give us a couple details about your two breakin events if you don't mind.
> > Did they ssh in as root?
>
> No, access was initially gained via an old dormant test account I
> forgot to remove after installing qmail called "mailtest."
>

I'm puzzled.
How would they know there would be a user name of "mailtest"?