The "/access_log" page:

Show login attempts, including timestamp and IP address.
Requires Admin privileges.

Query parameters:

   y=N      1: success only.  2: failure only.  3: both (default: 3)
   n=N      Number of entries to show (default: 200)
   o=N      Skip this many entries (default: 0)