The text c2aa57c1a704, as Debian 9 (Stretch) shipped it.
login failure logging file
faillog(5) on Linux now