Cause
This alarm may indicate a security threat. Notify the customer.
Proposed Solution
Procedure
Using a services login, enter the command userlock -s on the Linux command line. This will display all active logins in the system, the number of failed logins, and whether the incorrect login attempt that raised the alarm is currently locked out.