Lots of entries in my event log recently, stuff like:
The RDP protocol component X.224 detected an error in the protocol stream and has disconnected the client.
Remote session from client name a exceeded the maximum allowed failed logon attempts. The session was forcibly terminated.
Just in the past few weeks, starting last week of July or so.