Search notes:

/var/log/lastlog

/var/log/lastlog records when each user last logged in.
The group-owner of this file is utmp.

See also

The -l flag in useradd.
/var/log/wtmp, /var/log/faillog, /var/log/btmp
/var/log
Security: log files

Index