Every time you try to authorize on the site, an authorization log is written. The authorization log is recorded both in case of successful authorization on the site, and in case of unsuccessful one.
The logs are located in the "Users" - "Authorization Log" section.
Logs are stored for a certain number of days, after which they are permanently deleted.
Logs are deleted by cron job. You can configure the task in the "Settings" - "Cron" - "dеlete information about user authorization in the system" section. By default, deletion occurs "on the site", every 24 hours. Those. every 24 hours, the system deletes logs that are older than 30 days (unless otherwise specified in the logging settings).