ORA-28000

Who is generating Invalid logins on your DB?

If AUDIT_TRAIT is set to DB: If AUDIT_TRAIT is set to XML: In this case, this is the agent configured with a invalid password.