tomcat -- An attempt was made to authenticate the locked user

<date> org.apache.catalina.realm.LockOutRealm authenticate
WARNING: An attempt was made to authenticate the locked user "admin"



That looks like a brute force attack against the Manager application. The LockoutRealm has done its job and locked the user to prevent the attack from being successful. However, it does mean the legitimate user won't be able to log in either. Assuming the attacks are coming from a single IP, block that IP as early as you can in your network and move on.