if your are running the stock netBSD restore CD, you probably have the
syslogger  installed

the "authlog" in /var/log  is where all login / validation attempts
are logged to

cat authlog
will give you the whole thing, but i normally grep if for the failed connections


cat authlog | grep Failed

i get attempts constantly, but i have root disabled in my sshd_config
and all my passwords are really strong so i ignore it for now

good luck