# who /etc/security/failedlogin# /usr/sbin/acct/fwtmp < /etc/security/failedlogin