Hacker News Reader

Comment by throwaway613834 | Hacker News Reader

I've never heard of the command, so it's not obvious, thanks. However, I'm not sure how to interpret this. All I see is a single line:

    btmp begins Fri Sep  1 06:25:05 2017

Does this just mean nothing has happened? I'm not sure what's special about that date; the setup has certainly been running for much longer than that...

View on HN

That's not a bad sign then. Mine shows lots of attempts. lastb shows the last unsuccessful (bad) login attempts. it uses the file /var/log/btmp as input. the time stamp of "btmp begins .." either is the same as the creation date of the btmp file or if the btmp file was rotate of an older version i.e. /var/log/btmp.0

Reply on news.ycombinator.com