Are any other sites seeing groups of mangled subscription attempts to
some small subset of your lists?  I'm getting the feeling that someone
may be working on a decendant of KABOOM.  The following sample is not
edited at all.
                                              -Kary

------------------- Message causing the problem (6 lines) ---------------------
Received: from tw_email.barak.net.il (212.29.202.159) by maelstrom.stjohns.edu (LSMTP for OpenVMS v1.1a) with SMTP id <[log in to unmask]>; Wed, 1 Mar 2000 10:56:37 -0500
Received: from 206.253.202.82 (mg-206253202-82.ricochet.net [206.253.202.82]) by tw_email.barak.net.il with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2650.21)
        id FP6KV7VD; Wed, 1 Mar 2000 18:02:01 +0200
Subject: subscribe

SUBSCRIBE Munirah  Firstname Lastname
------- End of forwarded message -------