4 ms·

I've never heard of the command, so it's not obvious, thanks. However, I'm not sure how to interpret this. All I see is a single line: btmp begins Fri Sep

• andimm 9y ago
  That's not a bad sign then. Mine shows lots of attempts. lastb shows the last unsuccessful (bad) login attempts. it uses the file /var/log/btmp as input. the time stamp of "btmp begins .." either is the same as the creation date of the btmp file or if the btmp file was rotate of an older version i.e. /var/log/btmp.0