centos secure日志分析

大家好,

    我是新手,我的阿里云ECS的Web服务器,发现在/var/log/secure日志有大量FAILED LOGIN 1 FROM localhost FOR XXX类似的记录,请localhost表示本机登陆失败的记录吗？可是我是云服务器,什么情况会产生这些记录?

Mar 5 07:18:23 celeschere login: FAILED LOGIN 1 FROM localhost FOR root, Authentication failure
Mar 5 07:18:23 celeschere login: pam_securetty(remote:auth): access denied: tty 'pts/2' is not secure !
Mar 5 07:18:25 celeschere login: FAILED LOGIN 2 FROM localhost FOR root, Authentication failure
Mar 5 07:18:26 celeschere login: pam_securetty(remote:auth): access denied: tty 'pts/2' is not secure !
Mar 5 07:18:26 celeschere login: pam_unix(remote:auth): check pass; user unknown
Mar 5 07:18:26 celeschere login: pam_unix(remote:auth): authentication failure; logname= uid=0 euid=0 tty=pts/2 ruser= rhost=localhost