Try rhttpproxy or hostd log for information same time as the vodb states"Remote access for ESXi local user account 'root' has been locked for 120 seconds... rhttpproxy should give you IP address
Thanks,
MS
