User Administrator gets Blocked ( No ABAP)

Hello partners

we are facing an odd situation, our administrator account in our (only java) system is getting blocked four or fives times a day, its there a way to check what process or user is doing it?

something like a trace in ABAP?

we already check the default trace matching the time when the account got blocked but we weren't able find the cause

Thanks in advance to all