Considering that, on SQL Server on Linux, the server is set up for SQL logins only initially (it's a lot of work to use Kerboros, and I've not entertained trying it yet without a Domain Controller at home), it would seem prudent to that failed logins are logged. O.o