need help authentication event failure on server

[davema]

I'm trying to get advanced alerting going and I've changed some settings (and deployed/repaired the server agent and installed OpenSSH) and since then my server has logged thousands of authentication failures in SIM, any ideas where to look for the problem??

An authenticationFailure trap signifies that the sending protocol entity is the addressee of a protocol message that is not properly authenticated. While implementations of the SNMP must be capable of generating this trap, they must also be capable of suppressing the emission of such traps via an implementation- specific mechanism.

[davema]

to clarify these are events I see when I click on one of my servers in the HPSIM console, the same one I happened to install OpenSSH on and configured/repaired the agent on when the authentication failures started showing. Its coming in bunches every 10 minutes.