Event ID
Source
Category
Message
1006
TerminalServices-RemoteConnectionManager
None
Remote Desktop Services
The RD Session Host server received large number of incomplete connections. The system may be under attack.