bitbucket unknown user in audit log

Hello,

I'm noticing an unknown user with RepositoryPushEvent in the audit log. The userrname is fc0b04ffbb2901fb which looks more like an ID or hash.

Could you help understanding what's this?


Thanks,

Bilel

4 answers

0 vote

It is possible that this the event is raised by a plugin, which uses a Service User. Do you have any plugins installed that might modify repository data or otherwise raise this event?

I don't think one of our plugins does this. Here below is a list of the plugins we have, do you notice any suspecious one?

also, can you confirm that commits from unknow users will show as "Unknown" in the audit log?

 

Atlassian Universal Plugin Manager Self-Update Plugin

Bitbucket Look and Feel Plugin
Bitbucket Server Archive Plugin
Bitbucket Server - Auto Unapprove Pull Requests
Bitbucket Server Protect Unmerged Branch Hook
Bitbucket Server Webhook to Jenkins
Bitbucket Web Post Hooks Plugin
Block Unknown
Can't Push This: Prevent Direct Pushes To Specific Branches
Commit Graph
Custom Navigation Plugin
Favourites
Go2Group Hipchat Plugin
HTTP Request Post-Receive Hook for BitBucket Server
Http Request Trigger
pull-request-notifier-for-bitbucket

Reminders for Bitbucket

Repository git operations plugin

Repository Mirror Plugin for Bitbucket Server

Stash Pull Request Settings REST Access

The Tag Maker

user-permissions

Workzone for Bitbucket

Yet Another Commit Checker

0 vote

Hi Bilel, 

I can't immediately see anything that would explain what you're seeing. 

I'd suggest you raise a support ticket, so that we can collect some more information from you to get to the bottom of the unexplained audit log entries.

Felix 

0 vote
Jeff Thomas Atlassian Team Oct 07, 2016

The hash for the user name likely represents an access key that's being used to push commits to the repository. Do you use access keys for this repository or project?

For example, the below entry is from a push I did with an access key:

192.168.10.2 | RepositoryPushEvent | 97d5195ab5a3ce7e | 1475851678183 | PROJ/repo | [{"ref":"refs/heads/master","from":"a5665eeb1da5fdec43ea31f6c26fbcf138a01e56","to":"ac8a912df1ca16719d37c4906eb276715d589d5d"}] | @XNYUOMx887x5566x0 | 1on7762

I don't think we use one. I'll double check. Thanks for your reply Jeff.

Suggest an answer

Log in or Join to answer
Community showcase
Piotr Plewa
Published Dec 27, 2017 in Bitbucket

Recipe: Deploying AWS Lambda functions with Bitbucket Pipelines

Bitbucket Pipelines helps me manage and automate a number of serverless deployments to AWS Lambda and this is how I do it. I'm building Node.js Lambda functions using node-lambda&nbsp...

699 views 0 4
Read article

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you
Atlassian Team Tour

Join us on the Team Tour

We're bringing product updates and pro tips on teamwork to ten cities around the world.

Save your spot