Page MenuHomeDevCentral
Create Task
Maniphest T1026

Rename deploy account on Ysul and Eglide
Closed, WontfixPublic
Actions

Description

This username seems targeted by spambots.

This is an account intended for automated tools, and so we should avoid to have too much noise when debugging why a tool doesn't connect.

Oct 19 19:44:09 ysul sshd[23342]: Invalid user deploy from 202.117.35.252
Oct 19 19:44:09 ysul sshd[23342]: input_userauth_request: invalid user deploy [preauth]
Oct 19 19:44:10 ysul sshd[23342]: Connection closed by 202.117.35.252 port 32264 [preauth]

Could be the account used by Jenkins to deploy static sites, if not alken orin.

Should be documented.

Related Objects

Event Timeline

dereckson created this task.Oct 19 2016, 20:00
dereckson renamed this task from Rename deploy account on Ysul to Rename deploy account on Ysul and Eglide.Oct 15 2017, 12:23
dereckson added projects: good-first-issue, Salt.
dereckson moved this task from Backlog to Ops on the good-first-issue board.
dereckson moved this task from Backlog to Servers config on the Salt board.Nov 9 2017, 02:03
dereckson closed this task as Wontfix.Apr 16 2023, 15:21
dereckson claimed this task.

Flood is so high nowadays that we can need systematically to use | grep -v sshd.

We also restricted SSH for webservers to use only private network in T1829 / D3012.

Furthermore, with Alkane in T1826 / rALK, we switch from a push model Jenkins -> SSH -> webserver to a pull model webserver <-- Jenkins.

Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator