Account lockouts on AD2K3 DCs from a workstation with no IP address

We have a machine that is showing up on all of our DCs and locking out every account one after another. The machine can’t be pinged, has no ip address on our network, and does not show up in any DNS or DHCP logs.

All we get is an event ID 680 on our DC showing the source machine (which is completely untraceable to this point)

Anyone else seen this – we are open to ideas.