Frequent 20002 event flood in the Management Server

Hi all.My Management server is being often hit by a flood of 20002 events, and as a result i get frequest "Failed Authentication attempts check" alert rasied for the concerned MS.

1. None of those agents are in pending Management, Infact they all show up healthy in AgentManaged view

2. Verified that the agent healthservice registry settings does not point to anyother MS.

3. Agents and the MS are in the same domain. My complete SCOM infra is at CU5 level.

I doubt this to be an issue at the MS end. Could any of you help with more ideas to isolate the root cause for this?

Thanks,

Saravanan