I dont know why VMware support said this is normal as eventually after hearing no answers I v'motioned everything off the host, removed it from the virtual infrastructure, rebooted it and added it back into the virtual infrastructure.
All these repeating root login's have now disappeared!