Unexpected root and dcui logins to host?

Hello folks,

We have a Cisco UCS b200 M5 server that has lost its recognition of local SD cards, that hold the OS for boot.

Causing an error in vSphere related to it.

I am not sure it is related, but do see unexpected and not understood logins shortly before the first error directly on the host.

I've checked the /var/log/auth.log but do not see entries for this time (for some reason).

I've identified the "client" ip in the Description column, but did not see clear evidence yet when I logged into the server of unauthorized activity, yet.

Anyone have suggestions for how to determine where these logins came from and what they represent?

Thanks