sec - andreydiveev/wiki GitHub Wiki

Unsuccess login attempts

# last -f /var/log/wtmp

or

# utmpdump /var/log/wtmp

Archive version on unsuccess login attempts

# last -f /var/log/btmp

or

# utmpdump /var/log/btmp

Still logged in

# last -f /var/run/utmp

or

# who

or

# utmpdump /var/run/utmp