System Account Locked by 8 minute interval login attempts
The DBA_AUDIT_TRAIL table shows that the login attempts are coming from OS_USERNAME "SYSTEM", USERNAME "SYSTEM", and the USERHOST is the computer on which the ORACLE DB is installed. I have looked at Oracle scheduled jobs and Windows scheduled jobs and not found any suspects.
The COMMENT_TEXT for the activity that is locking our databases says:
Authenticated by: DATABASE; Client address: (ADDRESS=(PROTOCOL=tcp)(HOST=XXX.XX.XX.XXX)(PORT=XXXXX))