Why am i getting a lot of info messages about exceeded the maximum allowed failed logon attempts?

Im getting the following message four time a minute for 10 - 20 minutes straight.  Microsoft says this message is normal, but I think they assume it doesn't happen this often.  How can I find out what this is?

http://technet.microsoft.com/en-us/library/cc775156(v=WS.10).aspx

Log Name:      System
Source:        Microsoft-Windows-TerminalServices-RemoteConnectionManager
Date:          7/11/2014 2:36:21 PM
Event ID:      1012
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:      server
Description:
Remote session from client name a exceeded the maximum allowed failed logon attempts. The session was forcibly terminated.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-TerminalServices-RemoteConnectionManager" Guid="{C76BAA63-AE81-421C-B425-340B4B24157F}" EventSourceName="TermService" />
    <EventID Qualifiers="16384">1012</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-07-11T18:36:21.000Z" />
    <EventRecordID>643367</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>System</Channel>
    <Computer>server</Computer>
    <Security />
  </System>
  <EventData>
    <Data>a</Data>
  </EventData>
</Event>