Ftp and shell logins

Are any records kept of ftp and shell logins? How would I know if someone had captured my username/password?

Can I limit logins to certain IPs?


last -a username
last -ai username
(to show the IP instead of the hostname)
access to this command is restricted on some machines; if that’s the case, have support run it for you.

There’s basically no way to do this on a per-user basis (with our setup) that I’m aware of.