OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Fwd: Postfix SMTP server: errors from sc4-scan54.somehost.com[x.x.x.x]

From: John Brahy (jbrahycalistolabs.com)
Date: Wed Dec 22 2010 - 19:40:59 CST


 Should I be worried when I see: root+:|sleep 5 as the username?

---------- Forwarded message ----------
From: Mail Delivery System <MAILER-DAEMONsomeserver.com>
Date: Wed, Dec 22, 2010 at 02:33
Subject: Postfix SMTP server: errors from sc4-scan54.someserver.com[x.x.x.x]
To: Postmaster <postmastersomeserver.com>

Transcript of session follows.

 Out: 220 someserver.com ESMTP Postfix
 In:  HELO calistolabs.com
 Out: 250 someserver.com
 In:  MAIL FROM: <root[x.x.x.x]>
 Out: 250 2.1.0 Ok
 In:  RCPT TO: root+:"|sleep 5 #"
 Out: 550 5.1.1 <root+:|sleep 5 #>: Recipient address rejected: User unknown in
    local recipient table

Session aborted, reason: lost connection

For other details, see the local mail logfile