Hello Aleksein
This error occurs when an account has been locked out and the logon is unsuccessfull: https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/event-4625
About the logon type:
Logon type 3: Network. A user or computer logged on to this computer from the network.
The description of this logon type clearly states that the event logged when somebody accesses a computer from the network. Commonly it appears when connecting to shared resources (shared folders, printers etc.). As we learned in the previous post, the connection with logon type = 3 could be established even from a local computer.
From the looks of it, you may have an account that is locked out, but at the same time is configured to connect to some network resources. To find the locked accounts (and audit them) you can follow the next article that explains how to achieve it through Powershell:
https://devblogs.microsoft.com/scripting/use-powershell-to-find-locked-out-user-accounts/
-----------------------------------------------------------------------------------------------------------------------------------
--If the reply is helpful, please Upvote and Accept as answer--