[RAS] SECURITY information for ip-10-121-55-235 ***

[Christian Zimmermann]

Looks like it. A user is being added.

Christian Zimmermann                          FIGUGEGL!
Economic Research
Federal Reserve Bank of St. Louis
P.O. Box 442
St. Louis MO 63166-0442 USA
https://ideas.repec.org/zimm/   @CZimm_economist

On Fri, 2 Sep 2022, Thomas Krichel wrote:

>
>  Does this come from the RAS server?
>
> ----- Forwarded message from ssm-user at repec.org -----
>
> Return-path: <01000182fe901785-7d8c4360-d43c-4222-94e6-feec5ce7d21e-000000 at amazonses.com>
> Envelope-to: krichel at openlib.org
> Delivery-date: Fri, 02 Sep 2022 14:17:17 +0000
> Received: from iripa.openlib.org ([2a01:4f8:10b:1a2b::2])
> 	by helos.openlib.org with esmtps  (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
> 	(Exim 4.93)
> 	(envelope-from
> 	<01000182fe901785-7d8c4360-d43c-4222-94e6-feec5ce7d21e-000000 at amazonses.com>)
> 	id 1oU7Tw-004CDL-OM
> 	for krichel at openlib.org; Fri, 02 Sep 2022 14:17:17 +0000
> DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=repec.org;
> 	s=all; h=Date:Message-ID:Subject:From:To:Sender:Reply-To:Cc:MIME-Version:
> 	Content-Type:Content-Transfer-Encoding:Content-ID:Content-Description:
> 	Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:
> 	In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:
> 	List-Post:List-Owner:List-Archive;
> 	bh=LZORJhEQJJB7XL8kaRoSsGjsXQcPWfQVSs2PAYbz6i4=; b=tWBaKh6M3aNXG0nQZIvTEgsNVj
> 	4PiwJftRRx7AOGvZIWPZJ7mBU1d7n7EaxTdfgmQEQS+R2G13XXV2cDntdpsMMUmssurYqdD+KqY6B
> 	9zeyC31AaZws8oQHoG5kVInvkpCfPjea165ul8camo2cIZavpzl1haQsFylv50KBnQU0=;
> Received: from a48-102.smtp-out.amazonses.com ([54.240.48.102])
> 	by iripa.openlib.org with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
> 	(Exim 4.96)
> 	(envelope-from
> 	<01000182fe901785-7d8c4360-d43c-4222-94e6-feec5ce7d21e-000000 at amazonses.com>)
> 	id 1oU7Tu-007efi-00
> 	for root at repec.org;
> 	Fri, 02 Sep 2022 14:17:16 +0000
> DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;
> 	s=6gbrjpgwjskckoa6a5zn6fwqkn67xbtw; d=amazonses.com; t=1662128232;
> 	h=To:From:Subject:Message-Id:Date:Feedback-ID;
> 	bh=RIOB2qXpXP2fpCycXvKoceOUs7oqonozLkyANDrK4cI=;
> 	b=Bc+LnXJHdpgk8M1HLsrgmiOROGt+W+S+zvaKnnheBd8LkepHq/h4/18IIDxsx6nV
> 	vTjBpGGhvstW5e7RHLIlYvwGk8FgHw2dzciKsrUtYK5ghkcr0jfyvIm2ElWLsemafSv
> 	5wwVZ6YRsxAOyU3dFjKmbvlyqYYUg3x1dcWrP5rI=
> To: root at repec.org
> From: ssm-user at repec.org
> Auto-Submitted: auto-generated
> Message-ID: <01000182fe901785-7d8c4360-d43c-4222-94e6-feec5ce7d21e-000000 at email.amazonses.com>
> Date: Fri, 2 Sep 2022 14:17:12 +0000
> Feedback-ID: 1.us-east-1.eZVK1JbXJOEenNbyeaPfXd8IuVxQYSKRt4Tv6rln4Dc=:AmazonSES
> X-SES-Outgoing: 2022.09.02-54.240.48.102
> X-SA-Exim-Connect-IP: 2a01:4f8:10b:1a2b::2
> X-SA-Exim-Mail-From: 01000182fe901785-7d8c4360-d43c-4222-94e6-feec5ce7d21e-000000 at amazonses.com
> X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on helos.openlib.org
> X-Spam-Level:
> X-Spam-Status: No, score=-1.9 required=4.0 tests=BAYES_00,DKIM_SIGNED,
> 	DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,HEADER_FROM_DIFFERENT_DOMAINS,
> 	RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,SPF_HELO_NONE,SPF_PASS,
> 	T_SCC_BODY_TEXT_LINE,URIBL_BLOCKED autolearn=ham autolearn_force=no
> 	version=3.4.4
> Subject: *** SECURITY information for ip-10-121-55-235 ***
> X-SA-Exim-Version: 4.2.1 (built Sat, 08 Feb 2020 21:53:50 +0000)
> X-SA-Exim-Scanned: Yes (on helos.openlib.org)
>
> ip-10-121-55-235 : Sep  2 09:20:01 : ssm-user : user NOT in sudoers ; TTY=pts/0 ; PWD=/ ; USER=root ; COMMAND=/bin/su -
>
>
> ----- End forwarded message -----
>
> -- 
>
>  Cheers,
>
>  Thomas Krichel                  http://openlib.org/home/krichel
>                                              skype:thomaskrichel
>
> _______________________________________________
> RAS-run mailing list
> RAS-run at lists.openlib.org
> http://lists.openlib.org/cgi-bin/mailman/listinfo/ras-run
>