Event Viewer showing account lockout alerts (4740) from computers which are not in my domain (Caller Computer is not in domain)

[Sam Weeraman]

Hi guys,This is one of those weird issues that you come across, as i could not find anything related to this out in the world wide web searching for many days.Recently came across few account lockouts that have been happening in our domain, and these event alerts are showing computers which are not in our domain. Now there are few alerts where the "Caller Computer Name" is empty, but the majority shows up with incorrect computer names. Any idea why the caller name is not in our domain? was thinking this could be an attack from the outside but looking at the firewall its highly unlikely. I have

Continue reading...