How to identify failed logins when using email whitelisting

Is there a way to get a list of failed login attempts identifying the email address used when using email whitelisting please ? I.e email address not in whitelist, but want to capture email address to be able to provide access or reply to them