Frequent Locked Out issue with <SID>ADM

Hi Experts,

One of our BW production server is getting frequent event logs about the <SID>ADM logon failure and id gets locked out in time range of 2-10 minutes. It is getting locked during the call for SAPStartsrv.exe. What process/job could be triggerring these frequent calls to Sapstartsrv.exe.

No errors are there in the work directory WP logs.

There is no OS level service using this id. Also no other third party tool running on this server. Could you please assist to identify the source of the error and why it says Security ID is SAPService<SID> but locking the Account Name: <SID>ADM.

An account failed to log on.

Subject:
Security ID: <DOMAIN>\SAPService<SID>
Account Name: SAPSERVICE<SID>
Account Domain: <Domain>
Logon ID: 0x3ab038

Logon Type: 3

Account For Which Logon Failed:
Security ID: NULL SID
Account Name: <SID>adm
Account Domain: <Domain>

Failure Information:
Failure Reason: Unknown user name or bad password.
Status: 0xc000006d
Sub Status: 0xc000006a

Process Information:
Caller Process ID: 0x710
Caller Process Name: D:\usr\sap\<SID>\DVEBMGSXX\exe\sapstartsrv.exe

Network Information:
Workstation Name: <SERVER>
Source Network Address: -
Source Port: -