unknown ntries in /etc/security/failedlogins

[cycleroadie]

some of my AIX systems are getting these entries, over and over, about 3 each minute... some other systems are not getting them, anyone have any ideas ?? We do not think it's an attack as opposed to some setting ....

UNKNOWN_ tty0 Sep 27 07:22
UNKNOWN_ tty0 Sep 27 07:22
UNKNOWN_ tty0 Sep 27 07:22
UNKNOWN_ tty0 Sep 27 07:23
UNKNOWN_ tty0 Sep 27 07:23
UNKNOWN_ tty0 Sep 27 07:23

Lloyd

 

[DukeSSD]

What is tty0, the s1 serial port?
What is attached to tty0, a terminal emulator, a UPS?

If it is just a terminal then you probably have a noisy cable, if it is a UPS then you should probably disable the logins / getty on tty0.