What does an alert similar to this indicate:
This alert indicates that the IP in the alert has tried to connect to TPAM via ssh and failed.
This alert will help you identify issues with connectivity or unexpected connection attempts.
-Is the IP known? Should it be trying to connect to TPAM? If so, review why it may be failing.
-Is the IP not expected to be trying to connect to TPAM via ssh? If this is not expected, review the IP (if the resource is local) and correct the issue or perhaps block the IP via a firewall if it should not be connecting to TPAM.
Note the source port reported for the connection will likely be random, as will the Process ID (PID).