You can do DSPLOG and F4, then do F10( to view additional parameters) enter the time or month from which you want to see the attempts, in message identifier parameter enter CPF2234 . It will show you no. of unsuccessful attempts to login of all the users within that time span.
How are you defining “login attempts”? Telnet? Ftp? Remote Command? Distributed Program Call? REXEC? RPC? ODBC? JDBC? DRDA? Data queues? HTTP? Signon server? Different servers may provide different results. And do you want “attempts” or successful logins?
You have an interesting task ahead. First thing to determine will be how many ways a user may “attempt” to login to your system. Which servers do you run that request logins? (And which ones of those <i>require</i> logins? A server doesn’t necessarily have to <i>require</i> them.)