Teamcity Server received stop request on port
We had our Teamcity server stop last night randomly.
All I see in the logs that a request was sent to a shutdown port
[2025-01-15 08:49:01,622] console [Info] 15-Jan-2025 08:49:01.544 INFO [main] org.apache.catalina.core.StandardServer.await A valid shutdown command was received via the shutdown port. Stopping the Server instance.
I'm unsure how something even sent a request to the a shutdown port on the server.
Any help is appreciated
Please sign in to leave a comment.
The issue you’re describing suggests that the TeamCity server received a command through its shutdown port, which is a feature of Apache Tomcat, the web server used by TeamCity. This port is designed to allow an external request to stop the server gracefully.
- A script l may have accidentally sent the shutdown command.
- A team member or internal system may have inadvertently triggered the shutdown command.
Steps to Diagnose:
1. Review the Logs:
Examine the logs in more detail around the shutdown event. Look for connections or requests that precede the shutdown:
teamcity-server.log (TeamCity logs)
catalina.out or Tomcat logs
Identify the source IP address of the shutdown command.
2. Check the audit log
TeamCity logs user actions into the Audit log, which is available on the Administration | Audit page.
3. Investigate Team Activity:
Check if anyone in the team was troubleshooting or performing maintenance on the server.
4. Check for Misuse:
If malicious access is suspected, investigate further to rule out vulnerabilities.
Best Regards,
Tom