You can check the event which gives you the IP address and also there is a new feature in 6.0 which has default account lockout. Pls find below URL for more info https://www.v-front.de/2015/04/watch-out-esxi-60-introduces-root.html?m=1
Thanks,
MS
