How many times a second are the errors?

High number of login attempts can chew up CPU, but it would have to be very frequent.

Generally, any SQL server instance running on port 1433 and whose IP is not blocked by a firewall,

will see sa login attempts, primarily coming from IPs in China.