VMware Cloud Community
hutchingsp
Enthusiast
Enthusiast

DCOM activity in the small hours?!

I have a VC 2.5 server that was built from scratch a couple of weeks ago.

It seems to be doing some sort of network scan/sweep in the middle of the night.

For example I've had one of our Unix admins ask why it seems to be attempting to connect via Samba/SSH to his boxes at 4am, and the event log shows DCOM entries every morning at 3am since VC was installed, where it seems the box is attempting to do something on workstations on the domain.

I can't see anything in the VC documentation that says what it's doing, why it's doing it, or how to disable it.

Does anyone have any suggestions please?

0 Kudos
0 Replies