login failed for user 'domain\localMachineName$'
This is how the NETWORK SERVICE account from localMachineName presents itself to SQL Server (and file shares, and web sites, etc).

You need to profile "Login Failed" events (or XE Capture or whatever) to identify the program and/or Windows PID