Odd Command...

:hello:

Similar to the other thread I posted... this command is odd.

It was run on 2 different honeypots, a month in between each other. This tells me that there must have been some success with this command from attack 1 to attack 2, otherwise... why keep using it?

It's pretty clear that it's probably to test for an open relay, or any mail sending capacity... that much is obvious. This command is odd and broken... I don't understand why this particular command was used! As far as I can tell, it wouldn't work in any enviroment I've ever worked on. The man page for sendmail provides no help.

So, questions:
What's Bau?
What's the colon do?
Where could this work?

Code:

sendmail : [email protected] : Bau : sendmail : [email protected] : Bau : sendmail : [email protected] : Bau : sendmail : [email protected] : Bau : sendmail : [email protected] : Bau : sendmail : [email protected] : Bau : sendmail : [email protected] : Bau : sendmail : [email protected] : Bau : sendmail : [email protected] : Bau : sendmail : [email protected] : Bau : sendmail : [email protected] : Bau : sendmail : [email protected] : Bau : sendmail : [email protected] : Bau : sendmail : [email protected] : Bau : sendmail : [email protected] : Bau : sendmail : [email protected] : Bau : sendmail : [email protected] : Bau : sendmail : [email protected] : Bau : sendmail : [email protected] : Bau : sendmail : [email protected] : Bau : sendmail : [email protected] : Bau : sendmail : [email protected] : Bau : sendmail : [email protected] : Bau : sendmail : [email protected] : Bau : sendmail : [email protected] : Bau : ;

That's the command, run at the shell, all one line. Any ideas as to what could be going on?

Thanks, much appreciated.