/var/log/lastlog (finger)

/var/log/lastlog is similar to /var/log/wtmp and is used by finger (e.g.) to determine when a user was last logged on.