A Server We Retired in 2023 Was Still Taking Traffic Last Month

A firewall review last month turned up a host that was quietly handling around two hundred requests a day. The name was familiar. It was a reporting server we retired in the spring of 2023, with a signed checklist and a closed ticket to prove it.

The ticket was not dishonest. It recorded exactly what the project had done: migrated the reports, moved the users, and confirmed that nobody was logging in any more. What the project had not done was switch the machine off, because switching it off was not on anyone's critical path and leaving it running for a few weeks felt like sensible insurance. The few weeks became two and a half years. A scheduled export on that box kept writing a file to a shared folder, and a partner integration had been pointed at the address directly rather than at the service name, so both kept working and neither generated a complaint.

The costs were the ordinary kind. We paid maintenance on a database licence for a system nobody used. The operating system had not been patched since the retirement, because our patching scope is driven by the asset register and the register said the thing did not exist. It still held a service account with rights into the finance domain. And it was excluded from monitoring, so if it had failed, the partner integration would have broken with no alert and no owner to call.

The pattern is not carelessness. Decommissioning is the last item on a project that has already delivered its benefit, run by people whose budget and attention have moved elsewhere. Nobody is ever praised for the removal.

We now treat retirement as a defined workflow with verification rather than a closing note. There is a mandatory observation window where traffic to the host is watched, not assumed to be zero. There is a list that has to be cleared item by item: DNS records, certificates, service accounts, licences, backups, monitoring, the asset record and the cost centre. It has a named owner and a date, and it is reviewed like any other change.

Building things creates an inventory. Only finishing with them keeps it honest.

– Serguey Shinder