Uknown API logon on iDRAC

Hello Dell Community,

end of July we saw that a user logon happened on two of our iDRAC´s. The description of the logon says "Successfully logged in using oauththest_user, from 127.0.0.1 and REDFISH." We don´t know where the user and the login came from. The IP implies that the login came from the iDRAC itself, but the user does not exist on the system. Is there a way to find out from where the login came from? Is there a logfile which traces the API logons?

We already created a Support Ticket at Dell but they where not able to tell us where the login came from.

Any ideas?

thank you

regards