Antares is right in that you can't determine this after the fact.
You can set up a trace for logins and just track this over time. If you only get logins, then you'll get minimal data in the trace and the overhead is low.
For the server properties, security tab, you can audit all logins (I wouldn't do success only) and search the error logs as well.