DDM listing events that it shouldn't

I am having some trouble figuring out why Domino Domain Monitoring is reporting particular types of events: for example, events with the text “User not listed in Domino Directory”, which is event number 0x1105 and is Warning Low in Messaging: Routing

Background:

  1. we do not have any DDM probes configured.

  2. we have four event handlers that log to statrep.nsf any events where the Type is Agent, Replica, Security, or Server AND the severity is Fatal or Failure

  3. we have three event handlers that send me an e-mail based on particular built in events. One of these is mail event number 0x1106 “Recipient’s Domino Directory entry does not specify a valid Notes mail file”. Others are agent event 0x1AA1, and Replica event 0x161D

  4. we have the three event generators configured: an ACL change on names.nsf; a statistic event for Mail.Waiting > 10; and a statistic event on Disk.C.Free. These have corresponding event handlers that e-mail me.

  5. we also have a couple of event handlers that send me an e-mail message based on certain strings eg. “deleted by”.

  6. the DDM filter is the default: apply filter to simple events, log only Fatal and Failure types.

From what I can see, nothing that we have in events4.nsf would account for the particular events that are getting logged in DDM.

On our SMTP mail server, we get between 60 and 200 instances of 0x1105 logged per day. Why are they getting logged?