external ssh attempt every minute
Answered
We noticed today that our Teamcity server is attempting to ssh to an unknown external ip every minute. This is obviously suspicious and we would like to make sure this is a known thing. I don't want to post the ip in this forum, but can supply it if you contact me directly. Please let me know if you need any more info. Thanks.
Please sign in to leave a comment.
Hi Mark,
I would be happy to take a look. Please use the "Submit a Request" button at the top of the page to open a support ticket. We can communicate directly with you through that medium.
Thanks,
Eric
Thanks for following up with a support ticket, Mark. For anyone else that may run into a similar situation, it was discovered one of the VCS Roots on the server was configured to use SSH and was polling the version control system for changes every 60 seconds. This is completely normal behavior for TeamCity and it is how it is able to monitor multiple repositories.
The polling period can be adjusted if necessary, but the default is 60 seconds. For the majority of users, this is probably sufficient, but it may need to be adjusted in some cases. For more information, please refer to https://www.jetbrains.com/help/teamcity/configuring-vcs-roots.html