While looking in Terminal Services Manager on one of my SQL boxes, I noticed that there are seemingly many attempts to remote to the machine while I was connected:
One minute...
And the next...
I'm not seeing anything that seems to match this activity in the event viewer, and it's continuing. Where might I look to find out where these are coming from and what might be going on?