Can you check the failed logins on the database by running the query
SELECT * FROM DBA_AUDIT_SESSION WHERE RETURNCODE != 0;