Date: 2009dec25 OS: Linux Q. Linux: How/Where can I get info on user's unsuccessful attempts to login to my Linux system? A. Check out the faillog command.

man 5 faillog

man 8 faillog

It is in package shadow-utils which is almost certainly already installed.