sec - andreydiveev/wiki GitHub Wiki
Unsuccess login attempts
# last -f /var/log/wtmp
or
# utmpdump /var/log/wtmp
Archive version on unsuccess login attempts
# last -f /var/log/btmp
or
# utmpdump /var/log/btmp
Still logged in
# last -f /var/run/utmp
or
# who
or
# utmpdump /var/run/utmp