The account 'sa' is the default server admin account.
It would appear someone has been trying to access your server by using the SA account and they have typed in the wrong password.
There could be genuine reason behind it, but maybe its worth checking with your colleagues?
Matt