wtmp+btmp

lastb

Shows failed login attempts. This command requires the file /var/log/btmp to exist in order to work. Type "touch /var/log/btmp" to begin logging to this file.

wtmp: records all logins and logouts. Its format is exactly like utmp except that a null user name indicates a logout on the associated terminal.


The /var/log/wtmp is a file on Unix-like systems that keeps track of all logins and logouts to the system. It is defined in the Filesystem Hierarchy Standard 2.3.