The lastb command is able to show a list of failed users logins since the creation date of the
/var/log/btmp file. The
/var/log/btmp file is a binary file which can not be viewed with a normal text editor.
This is not enabled by default, but can be enabled with the commands:
# touch /var/log/btmp # chmod 640 /var/log/btmp
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.