If it is only BI maybe it is the "keep alive" function and it is constantly pinging it or the ONVIF authentication is whacked. Does it show a triangle or any error in BI?
Or maybe it is the camera trying to communicate and call home or connect to a time server.
You have led the horse to water, and he drank.
How do I know the logins are from BI? Because I just know, of course, but to cover myself I noted that they stopped when I disabled the camera in BI.
After experimenting with a lot of BI settings the little birdie on my shoulder reminded me about the triangle question above, and sure enough, there was a yellow triangle on the camera. Jumping to the end, the camera was configured for Generic ONVIF instead of Dahua. Fixed that and the yellow triangle disappeared and the frequent logins stopped. Surely a BI bug, couldn't possibly be user error, right . Thank you both!!!