Yesterday I got 30 account lockouts (Event ID 539) on my own user account, but only 5 incorrect logins (Event ID 529 - logon type 3) - which mostly don't even match up with the lockouts. Nothing seems to be coming from an external IP address, or even from a workstation on the domain. Today there are no login errors at all.
What could this be? Should I just ignore it?
SBS 2003 Standard, SP2
Thank you in advance,