login attempts httpd/logs/* httpd F D RF Apache HTTP server logs (in /etc) kern.log kernel S W DU All kern facility messages lastlog login H – all Last login time .