Java Administrator account locks frequently

[Former Member]

In our java only system, the administrator user (and others) lock frequently with failed logins. Is there a way to determine the source of the lock, such as the originating IP address?

We have a complex landscape, and as of yet have been unable to find a RFC or other connection with invalid credentials.

Thank you.

[Former Member]

I found the answer myself. It is logged:

usr\sap\<sid>\<instance>\cluster\server0\log\system\security.0.log

com.sap.security.core.util.SecurityAudit#Plain###Guest | LOGIN.ERROR | NONE = null | | Login Method=[default], UserID=[adminstrator], IP Address=[xxx.xxx.xxx.xxx], Reason=[Authentication did not succeed.]

Hope this helps someone else.